Creating a registration form using PHP

Creating a membership based site seems like a daunting task at first. If you ever wanted to do this by yourself, then just gave up when you started to think how you are going to put it together using your PHP skills, then this article is for you. We are going to walk you through every aspect of creating a membership based site, with a secure members area protected by password.

The whole process consists of two big parts: user registration and user authentication. In the first part, we are going to cover creation of the registration form and storing the data in a MySQL database. In the second part, we will create the login form and use it to allow users access in the secure area.

Download the code

You can download the whole source code for the registration/login system from the link below:
RegistrationForm.zip

Configuration & Upload
The ReadMe file contains detailed instructions.

Open the source\include\membersite_config.php file in a text editor and update the configuration. (Database login, your website’s name, your email address etc).

Upload the whole directory contents. Test the register.php by submitting the form.

The registration form

PHP registration form sample
In order to create a user account, we need to gather a minimal amount of information from the user. We need his name, his email address and his desired username and password. Of course, we can ask for more information at this point, but a long form is always a turn-off. So let’s limit ourselves to just those fields.

Here is the registration form:

<form id='register' action='register.php' method='post' 
    accept-charset='UTF-8'>
<fieldset >
<legend>Register</legend>
<input type='hidden' name='submitted' id='submitted' value='1'/>
<label for='name' >Your Full Name*: </label>
<input type='text' name='name' id='name' maxlength="50" />
<label for='email' >Email Address*:</label>
<input type='text' name='email' id='email' maxlength="50" />

<label for='username' >UserName*:</label>
<input type='text' name='username' id='username' maxlength="50" />

<label for='password' >Password*:</label>
<input type='password' name='password' id='password' maxlength="50" />
<input type='submit' name='Submit' value='Submit' />

</fieldset>
</form>

So, we have text fields for name, email and the password. Note that we are using the password widget for better usability.

Form validation

At this point it is a good idea to put some form validation code in place, so we make sure that we have all the data required to create the user account. We need to check if name and email, and password are filled in and that the email is in the proper format.

We can use the free JavaScript form validation script to add form validations quickly and easily, with lesser code.

Here is a sample JavaScript validation code to be used for the sample form we created earlier:

var frmvalidator  = new Validator("register");
frmvalidator.EnableOnPageErrorDisplay();
frmvalidator.EnableMsgsTogether();
frmvalidator.addValidation("name","req","Please provide your name");

frmvalidator.addValidation("email","req","Please provide your email address");

frmvalidator.addValidation("email","email","Please provide a valid email address");

frmvalidator.addValidation("username","req","Please provide a username");

frmvalidator.addValidation("password","req","Please provide a password");

To be on the safe side, we will also have the same validations on the server side too. For server side validations, we will use the PHP form validation script

Handling the form submission

Now we have to handle the form data that is submitted.

Here is the sequence (see the file fg_membersite.php in the downloaded source):

function RegisterUser()
{
    if(!isset($_POST['submitted']))
    {
       return false;
    }
    
    $formvars = array();
    
    if(!$this->ValidateRegistrationSubmission())
    {
        return false;
    }
    
    $this->CollectRegistrationSubmission($formvars);
    
    if(!$this->SaveToDatabase($formvars))
    {
        return false;
    }
    
    if(!$this->SendUserConfirmationEmail($formvars))
    {
        return false;
    }

    $this->SendAdminIntimationEmail($formvars);
    
    return true;
}

First, we validate the form submission. Then we collect and ‘sanitize’ the form submission data (always do this before sending email, saving to database etc). The form submission is then saved to the database table. We send an email to the user requesting confirmation. Then we intimate the admin that a user has registered.

Saving the data in the database

Now that we gathered all the data, we need to store it into the database.
Here is how we save the form submission to the database.

 function SaveToDatabase(&$formvars)
    {
        if(!$this->DBLogin())
        {
            $this->HandleError("Database login failed!");
            return false;
        }
        if(!$this->Ensuretable())
        {
            return false;
        }
        if(!$this->IsFieldUnique($formvars,'email'))
        {
            $this->HandleError("This email is already registered");
            return false;
        }
        
        if(!$this->IsFieldUnique($formvars,'username'))
        {
            $this->HandleError("This UserName is already used. Please try another username");
            return false;
        }        
        if(!$this->InsertIntoDB($formvars))
        {
            $this->HandleError("Inserting to Database failed!");
            return false;
        }
        return true;
    }

Note that you have configured the Database login details in the membersite_config.php file. Most of the cases, you can use “localhost” for database host.
After logging in, we make sure that the table is existing.(If not, the script will create the required table).
Then we make sure that the username and email are unique. If it is not unique, we return error back to the user.

The database table structure

This is the table structure. The CreateTable() function in the fg_membersite.php file creates the table. Here is the code:

function CreateTable()
{
    $qry = "Create Table $this->tablename (".
            "id_user INT NOT NULL AUTO_INCREMENT ,".
            "name VARCHAR( 128 ) NOT NULL ,".
            "email VARCHAR( 64 ) NOT NULL ,".
            "phone_number VARCHAR( 16 ) NOT NULL ,".
            "username VARCHAR( 16 ) NOT NULL ,".
            "password VARCHAR( 32 ) NOT NULL ,".
            "confirmcode VARCHAR(32) ,".
            "PRIMARY KEY ( id_user )".
            ")";
            
    if(!mysql_query($qry,$this->connection))
    {
        $this->HandleDBError("Error creating the table \nquery was\n $qry");
        return false;
    }
    return true;
}

The id_user field will contain the unique id of the user, and is also the primary key of the table. Notice that we allow 32 characters for the password field. We do this because, as an added security measure, we will store the password in the database encrypted using MD5. Please note that because MD5 is an one-way encryption method, we won’t be able to recover the password in case the user forgets it.

Inserting the registration to the table

Here is the code that we use to insert data into the database. We will have all our data available in the $formvars array.

function InsertIntoDB(&$formvars)
{
    $confirmcode = $this->MakeConfirmationMd5($formvars['email']);

    $insert_query = 'insert into '.$this->tablename.'(
            name,
            email,
            username,
            password,
            confirmcode
            )
            values
            (
            "' . $this->SanitizeForSQL($formvars['name']) . '",
            "' . $this->SanitizeForSQL($formvars['email']) . '",
            "' . $this->SanitizeForSQL($formvars['username']) . '",
            "' . md5($formvars['password']) . '",
            "' . $confirmcode . '"
            )';      
    if(!mysql_query( $insert_query ,$this->connection))
    {
        $this->HandleDBError("Error inserting data to the table\nquery:$insert_query");
        return false;
    }        
    return true;
}

Notice that we use PHP function md5() to encrypt the password before inserting it into the database.
Also, we make the unique confirmation code from the user’s email address.

Sending emails

Now that we have the registration in our database, we will send a confirmation email to the user. The user has to click a link in the confirmation email to complete the registration process.

function SendUserConfirmationEmail(&$formvars)
{
    $mailer = new PHPMailer();
    
    $mailer->CharSet = 'utf-8';
    
    $mailer->AddAddress($formvars['email'],$formvars['name']);
    
    $mailer->Subject = "Your registration with ".$this->sitename;

    $mailer->From = $this->GetFromAddress();        
    
    $confirmcode = urlencode($this->MakeConfirmationMd5($formvars['email']));
    
    $confirm_url = $this->GetAbsoluteURLFolder().'/confirmreg.php?code='.$confirmcode;
    
    $mailer->Body ="Hello ".$formvars['name']."\r\n\r\n".
    "Thanks for your registration with ".$this->sitename."\r\n".
    "Please click the link below to confirm your registration.\r\n".
    "$confirm_url\r\n".
    "\r\n".
    "Regards,\r\n".
    "Webmaster\r\n".
    $this->sitename;

    if(!$mailer->Send())
    {
        $this->HandleError("Failed sending registration confirmation email.");
        return false;
    }
    return true;
}

We use the free PHPMailer script to send the email.
Note that we make the confirmation URL point to confirmreg.php?code=XXXX (where XXXX is the confirmation code).
In the confirmreg.php script, we search for this confirmation code and update the ‘confirmed’ field in the table.

After completing all these operations successfully, we send an email to the admin (configured in the membersite_config.php file)

See also:Making a login form using PHP

Updates

9th Jan 2012
Reset Password/Change Password features are added
The code is now shared at GitHub.

25th May 2011
Now you can display the logged-in user’s name with this code:

Welcome back <?= $fgmembersite->UserFullName(); ?>!

License


The code is shared under LGPL license. You can freely use it on commercial or non-commercial websites.

Comments on this entry are closed.

  • sir…this great form…but i get “Failed sending registration confirmation email.” plz help!!!!!

    • did you solved this error
      plz help me

  • hi there…i get this error..€œFailed sending registration confirmation email.€ i m using local server localhost…plz sir help!!!

  • I’m having problems with the Reset password feature. I write an email to the form, press submit, and the email is sent, but the link in the email doesn’t contain the email address. Like this: resetpwd.php?email=&code=ffc37d2fc4

    • I figured that part out, had to add

      $email = $user_rec[’email’];
      $to = $email;

      to SendNewPassword function.

      but now I’m getting “Error sending new password”, even though the new password is emailed successfully, this is the part of the code that gives the error message. SendNewPassword is just like in the template, except for the addition i already mentioned.

      if(false == $this->SendNewPassword($user_rec,$new_password))
      {
      $this->HandleError(“Error sending new password”);
      return false;
      }

  • I did run the script. It is a wonderful thing that you did here keep up the good work. I just want to know how to solve this error message “Failed sending registration confirmation email.”.

  • Great tutorial. I am running into one small problem. Does anyone know how to correct or fix the €œFailed sending registration confirmation email.€ error?

  • The error I encounter is € Failed sending registration confirmation email.€

    after registration how to solve this problem

  • Why did my full code not show up on previous post, regarding
    The code is not working:
    on access-controlled.php line 23

    **********************************************************************************************
    Welcome back UserFullName(); ?>! on login-home.php line 21

    ?
    Regards.
    Lucien F. Brancaccio

  • I had a problem when is used drop down list(php) ie when i select an item from the list and submit all other text datas are getting stored in the database(mysql) except of the item from list.

  • Whoever wrote (and share) this script … man THANK YOU !!!
    I have tried dozens of different scripts – this is the first one that actually works !

    Thank you

  • pls help with email error,
    Failed sending registration confirmation email.

  • If there is a video demo along with this content it will be very much easy for us to understand

    Thank you…

  • Could some kind person please just give me the full code to this script, thankyou!

    • Complete code? The download link below the ‘Download the code’ heading is the complete code.

  • Open the source\include\membersite_config.php file in a text editor and update the configuration. (Database login, your website’s name, your email address etc).

    pls i cant find the configuration mention above can you help please

  • I had a problem when i used calender code(php) ie when i select an item from the list and submit all other text data’s are getting stored in the database(mysql) except the date. What would be the problem

  • hi im having problem with the database is it MySQL server? im using xammp.. sorry im a little bit new

  • Anyone know why when I click on the index.html, i get the Membership Website – thats fine, however, when I click on Register or any other link, I get the form with

    “RegisterUser()) { $fgmembersite->RedirectToURL(“thank-you.html”); } } ?> ”

    at the top of the page and under Required Fields i get

    GetErrorMessage(); ?>

    and in my form, the input boxes have

    SafeDisplay(

    inside the box with it ‘spilling’ out to underneath the input box (form)

    Any ideas? Seems like its something simple. Thanks, Luis

  • you are a wonderful human being for giving such precise how to’s. This really has helperd ever since my idea hit the “php reality” wall.
    Thank you

  • I HAVE THI ERROR PL HELP ME
    Warning: mysql_connect() [function.mysql-connect]: Access denied for user ‘_upload’@’espero.websitewelcome.com’ (using password: YES) in /home//public_html/source/include/fg_membersite.php on line 733
    Register
    * required fields
    Database Login failed! Please make sure that the DB login credentials provided are correct
    mysqlerror:Access denied for user ‘j_upload’@’espero.websitewelcome.com’ (using password: YES)
    Database login failed!

  • I just copy confirm code and past on Confirm registration page. But after that when i log in password can not mach.

    Please check this.

  • I did everything you said to do but i get this error: Database Login failed! Please make sure that the DB login credentials provided are correct
    mysqlerror:Access denied for user ‘prasanth’@’localhost’ (using password: YES)
    Database login failed!

    • Because my login won’t work on your server! Or are you prasanth?