User authentication with MySQLi Server Behaviors

Tutorial created by Ray Borduin, WebAssist

Categories: MySQLi Server Behaviors, Dreamweaver, PHP

11 ratings | Sign in to rate this tutorial | View comments

next section

What do you need to start?

1. Dreamweaver CS4 or higher; Dreamweaver CS6 or higher to use the Query Builder
   
2. MySQLi Server Behaviors installed and activated.
   
3. Site defined in Dreamweaver. For assistance, watch this tutorial: Setting up a site in Dreamweaver.
   
4. MySQL database with registered users. If you do not have an existing database, you can download our free eCommerce MySQL database in this tutorial.
   
5. PHP web page with a log-in form.
   
6. Connection in Dreamweaver to your database. For assistance, view this tutorial: Create a PHP database connection.

next section

What is MySQLi?

Before we begin with the steps in this tutorial, let's discuss why WebAssist created the MySQLi Server Behaviors interface. The original MySQL library that the original Dreamweaver server behaviors is based on is now deprecated in PHP as well as Dreamweaver. Because MySQL will be removed in the future, we have taken the functionality that used to exist within Dreamweaver for MySQL and recreated it in the MySQLi Server Behaviors extension as both a replacement and an improvement.

next section

Create MySQLi database connection

To begin User authentication set-up, the first step is to create a MySQLi database connection.

1. Open a php page in your Dreamweaver site.
   
   
2. Go to the Databases panel, click the + icon, and choose Dynamic MySQLi Connection.
   
   
   
   
   
3. Fill in your connection name and choose the default Charset, as indicated.
   
   
4. Continue filling in the fields for your MySQL server, User name, and Password.
   
   
5. Use the Select button to search for and select your database.
   
   
   
   
   
6. Test your connection and click OK.
   
   
   
   
   
7. Click OK to close the Dynamic MySQLi Connection window.
   
   
8. Now you can see the MySQLi connection in the Databases panel.
   
   
   

next section

MySQLi Log In User

The WebAssist MySQLi Log In User authenticates, that is, uniquely identifies, who is logging into your site. Users will enter required data into a login form (for example, an email address) which in turn is compared to stored data given by users during registration. If the data matches, users will gain access to your website pages until logging out or the session ends. This results in restricting your site's content or certain pages to authorized users.

1. Open the PHP page where you wish your users to log in.
   
   
   
   
   
2. In the Server Behaviors panel, click the + icon and choose WebAssist > MySQLi > User Authentication > MySQLi Log In User to open the WebAssist MySQLi Log In User interface.
   
   General tab
   
   As an enhancement to the native Dreamweaver, MySQLi User Authentication allows for multiple logins throughout a website versus a single login. For example, on one page, a registered user may have access as a user and on another page, the same person may have access an administrator.
   1. Login Name: This field is used to specify a unique identifier for each login.
      
      
   2. Trigger: Click the Trigger select list to indicate when login should occur.
      
      1. Any form post: The server behavior is applied to a form on the current page to trigger the data insert.
         
      2. Before page load: The server behavior is applied to the current page to trigger the data insert when the page loads.
         
      3. Current page submit: The server behavior is triggered when a page is submitted.
         
      4. Rules: Multiple conditional rules based on other WebAssist Server Behaviors.

      
      

   3. Connection: Choose your MySQLi connection.
      
      
   4. Table: Select the database table with the column containing your registered users.
      
      
   5. Success Redirect: Browse using the folder icon to choose a page where you would like the user redirected after a successful login.
      
      Optional: Click the Return to restricted page checkbox if you wish for users to be redirected to the restricted page they attempted to access prior to successful login.
   6. Failure Redirect: Browse using the folder icon to choose a page where you would like the user redirected after a failed login.
      
      
      

   
   Find Record tab
   

   As an enhancement to the native Dreamweaver, MySQLi User Authentication allows you to find a record based on one or more columns. Basing the record on one column, for example, user email, might make sense when you are offering an internet app that is behind a firewall, such as an online newsletter. But for more security, MySQLi User Authentication offers you the option of basing the record on multiple columns, for example, password, secret question, and email, in order to authenticate users.
   1. Column: Now you will enter the value you want to compare to the record in your database table by first selecting the corresponding column. In this example, we select the UserEmail column because a unique email address was required from the user during registration.
      
      
   2. Value: Next enter a static value or a variable. Alternately, you can select a value from Bindings using the dynamic data lightning bolt button. You would usually select the form elements for username and password from the created form.
      
      
   3. Submit as Type: Make a selection in the Submit as list to designate the data type you will be comparing your values to.
      
      You may find that the data type has been preset based on the column type, for example, Text.
      1. Text
         
      2. Integer
         
      3. Double
         
      4. Date
         
      5. Checkbox Y,N
         
      6. Checkbox 1,0
         
      7. Checkbox -1,0
      

   
   Store Value tab
   

   As an enhancement to the native Dreamweaver, MySQLi User Authentication allows you to store one or more session variables. There will be one general session variable that will be used to restrict access. But you can store additional session variables to look up user information or display names and email addresses on various pages throughout your website.
   1. Enter session variable names that you wish to store corresponding column values in for the remainder of the session.
      
      
      
      
      
   2. Click OK to apply the Log In User server behaviors to the current page.
      
      
      
      
      
      No values will be stored on a page in the event of an unsuccessful login.
      
      
   3. Edits to Log In User can be made from the Server Behaviors panel.
      
      
      

next section

MySQLi Log Out User

The WebAssist MySQLi Log Out User interface allows you to determine which user authentication you are logging out. The logout occurs by clearing session variables after a successful login attempt. Logging out users means the associated restricted pages on your website will no longer be accessible.

1. Trigger: Use the Trigger select list or the Dynamic Data interface (lightning bolt) to select the event in which your record will be updated.
   
   1. Any form post: The server behavior is applied to a form on the current page to trigger the data insert.
      
   2. Before page load: The server behavior is applied to the current page to trigger the data insert when the page loads.
      
   3. Current page submit: The server behavior is triggered when a page is submitted.
      
   4. Rules: Multiple conditional rules based on other WebAssist Server Behaviors.
      
   5. Dynamic Data interface: If the triggers in the list do not meet your requirements, use the lightning bolt to specify server-side code.

   
   

2. Authentication: Select from the list the unique login value used in the Log In User interface.
   
   
   
   
   
3. Click OK to apply the Log Out User server behaviors to the current page.
   
   
   
   
   
4. Edits to Log Out User can be made from the Server Behaviors panel.
   
   
   

next section

MySQLi Restrict Access to Page

The WebAssist MySQLi Restrict Access To Page allows you to restrict access to a specific page based on user credentials.

1. Trigger: Use the Trigger select list or the Dynamic Data interface (lightning bolt) to select when access restriction should occur.
   
   1. Any form post: The server behavior is applied to a form on the current page to trigger the data insert.
      
   2. Before page load: The server behavior is applied to the current page to trigger the data insert when the page loads.
      
   3. Current page submit: The server behavior is triggered when a page is submitted.
      
   4. Rules: Multiple conditional rules based on other WebAssist Server Behaviors.
      
   5. Dynamic Data interface: If the triggers in the list do not meet your requirements, use the lightning bolt to specify server-side code.

   
   

2. Authentication: Select from the list the unique login value used in the Log In User interface. Once set, the page will be restricted to all users without authentication.
   
   
3. Failure Redirect: Browse using the folder icon to choose a page where you would like the user redirected after attempting to access a restricted page while not being logged in.
   
   
   
   
   
4. Click OK to apply the Restrict Access to Page server behaviors to the current page.
   
   
   
   
   
5. Edits to Restrict Access to Page can be made from the Server Behaviors panel.
   
   
   

next section

MySQLI Check New User Name

The WebAssist MySQLI Check New User Name interface prevents duplicate user registrations by performing a check on new user registrations to see if the username (for example, an email address) already exists in the database table records. This task occurs when a table is searched for any matches using the value and column that you specify in the interface.

General tab

1. Trigger: Click within the select list to choose when username lookup will occur.
   
   1. Any form post: The server behavior is applied to a form on the current page to trigger the data insert.
      
   2. Before page load: The server behavior is applied to the current page to trigger the data insert when the page loads.
      
   3. Current page submit: The server behavior is triggered when a page is submitted.
      
   4. Rules: Multiple conditional rules based on other WebAssist Server Behaviors.
      
   5. Dynamic Data interface: If the triggers in the list do not meet your requirements, use the lightning bolt to specify server-side code.

   
   

2. Connection: Choose your MySQLi connection.
   
   
3. Table: Select the database table with the column containing your registered users.
   
   
4. Found Redirect: Browse using the folder icon to choose a page where you would like the user redirected after a duplicate user registration is found.
   
   
   

Find Record tab

1. Column: Now you will enter the value you want to compare to the record in your database table by first selecting the corresponding column. In this example, we selected the UserEmail column because a unique email address was required from the user during registration.
   
   
2. Value: Next enter a static value or a variable. Alternately, you can select a value from Bindings using the dynamic data lightning bolt button.
   
   
3. Submit as Type: Make a selection in the Submit as list to designate the data type you will be comparing your values to.
   
   You may find that the data type has been preset based on the column type, for example, Text.
   1. Text
      
   2. Integer
      
   3. Double
      
   4. Date
      
   5. Checkbox Y,N
      
   6. Checkbox 1,0
      
   7. Checkbox -1,0

   
   

   
   
   
4. Click OK to apply the Check New User Name server behaviors to the current page.
   
   
   
   
   
5. Edits to Check New User Name can be made from the Server Behaviors panel.
   
   
   

next section

Where do you go next?

Now that you understand how to use the User authentication interface, learn how to use WebAssist's data modeling interface and query builder tool by watching this video: Query Builder tool and Data Modeling interface.

MySQLi Server Behaviors series

With WebAssist's MySQLi Server Behaviors, you can quickly create various server behaviors to generate streamlined MySQLi code in Dreamweaver. The following tutorials in the MySQLi Server Behaviors series for websites with custom database driven pages demonstrate how to insert, update, and delete records, add user authentication, record count, pagination links, and show if statements. Additionally, you will learn how to use WebAssist's Data Modeling interface and Query Builder tool.

1. MySQLi Server Behaviors series: An overview of four in-depth tutorials to help you transition to MySQLi so that your websites will continue to work when the next version of PHP is released.
   
   
2. Insert, update, and delete records: The data management interface allows users to insert, update, and delete data in a database from a PHP page. From the individual insert, update, and delete interfaces, users can choose a trigger, such as a form post, and specify how to manipulate records in a database.
   
   
3. User authentication: The MySQLi user authentication interface allows code to be generated on a PHP page to log in users stored in the database. You can also log out users, check if a username exists with the Check New Username server behavior and restrict access to a specific page based on user credentials.
   
   
4. Data Modeling and Query Builder tool: Watch the video demonstrating how to use the stand alone Data Modeling interface that allows users to set up joins which will be automatically applied whenever tables are added in the MySQLi recordsets. The Query Builder tool allows users to drag and drop database tables onto a grid and create relationships between database tables to create advanced SQL statements.
   
   
5. Getting started with MySQLi Server Behaviors: Learn how to generate a simple results page by creating a recordset, adding a binding to a PHP page, and wrapping a repeat region around that binding. Then you'll be walked through adding a record count, pagination links, and show if statement. Once you understand the concepts, you can build on your knowledge to create custom database driven pages for your website.

Reviews and comments

Comments will be sent to the author of this tutorial and may not be answered immediately. For general help from WebAssist, please visit technical support.

11 ratings | Sign in to rate this tutorial