PHP login from text file

Question

Hi I have looked at other posts about this but they are 2 or more years old so I thought it was better to start fresh.

As the title suggests I am trying to make a login page with php. Users should be able to login to a special member only page. The usernames and passwords are stored in a textfile (note this is for an assignment otherwise I'd use SQL). My code is below

  ?php

  echo "Username: <input type=\"text\" name=\user-name\"><br>";
 echo "Password: <input type=\"text\" name=\pass-word\"><br>";
 echo "<input type=\"submit\" value=\"login\" name=\"login\"><br>";

$userN = $_POST['user-name'];
$passW = $_POST['pass-word'];
$userlist = file ('users.txt');
$checkUser =$userlist[0];

if (isset($_POST['login']))
{
if ($userN == $userlist)
{
    echo "<br> Hi $user you have been logged in. <br>";
}
else
{
echo "<br> You have entered the wrong username or password. Please try again. <br>";
}
}
?>
<form action="login.php" method="post">
Username: <input type="text" name="username">
<br />
Password: <input type="password" nme="pass"
<br />
<input type="submit" name="submitlogin" value="Login">

I know I need to use the explode function and I need to define how the text file will be set out. ideally username|password. in a file called users.txt The users file also has to contain information such as the email (can replace username) the customers name, the business name (of the customer) and special prices for members.

Answer 1

Lets say your text file looks something like this:

pete|petepass|pete@somesite.com|Pete Enterprizes
john|johnpass|john@somedomain.com|John Corporation

Your code can read something like this:

$userN = $_POST['user-name'];
$passW = $_POST['pass-word'];
$userlist = file ('users.txt');

$email = "";
$company = "";

$success = false;
foreach ($userlist as $user) {
    $user_details = explode('|', $user);
    if ($user_details[0] == $userN && $user_details[1] == $passW) {
        $success = true;
        $email = $user_details[2];
        $company = $user_details[3];
        break;
    }
}

if ($success) {
    echo "<br> Hi $userN you have been logged in. <br>";
} else {
    echo "<br> You have entered the wrong username or password. Please try again. <br>";
}