Thursday 2 February 2012

Setup Web Authentication on Your Website

There have been many occasions in which I have had to setup Web Authentication for websites or particular web pages. In this article, I will tell you how I set up web authentication using PHP and MySQL and where the real power lies in this technology.

After you have had a website setup for awhile, or perhaps just when you are getting started, there will be a time when you need web page or entire website authentication. Web page authentication enables you to setup your web pages so that they can only be accessed by those who you would like.

Of course, there are some rudimentary ways to do this. For example, if it is just for yourself, you can simply go to the administration panel of your website (many hosts like HostGator refer to this as your cPanel), and choose to password protect a directory. However, you often need more granular control like the ability to password protect certain pages.

When you need this type of granularity, the approach I like to use is web authentication using PHP and MySql. You could of course take lots of time in trying to design a solution yourself...but why would you? There is already a great solution out there for you and it is called the PHP Login Script which can be downloaded from the Internet for free.

This program is terrific in achieving its stated goal which is to be: "A simple home made PHP/MySQL login script to protect your web page content from spam and bot registrations so that only registered users can view the content of your site.. It is free of charge and you can use it on any commercial or personal projects!"

For me, however, the true power of this script goes well beyond its simple intention.

Once you have implemented the PHP Login Script, you can not only protect your website or your web pages, you can also tailor database output for each user based on the session variables automatically created by this program.

If that all sounded too complicated, not to worry. I just mean that you can have one page, for example mypage.php, and customize the output of that page for your visitors. We will look at how to do this below.

First, let's a look at the PHP Login Script.

When many people see the terms PHP and MySQL, they run for the hills. Understandably, unless you are a programmer, many of the terms that you will come across can take some getting used to. However, as an SEO specialist, or web admin, knowledge of PHP and MySQL will take you a very long way.

While I am not going to go into the details of this PHP Login Script, as this is outlined rather well on the author's website, I will tell you that you can implement this script within an hour if you know how to setup a database on your website (you use cPanel to do this on most hosts), modify text files, and upload them to a directory on your website.

After you download and extract the program files, simply follow the instructions exactly and you will be all setup.

Obviously, you will want to test and customize this application considerably before you implement it on your website. Thus, I recommend that you create a temporary directory to install and test this application. Once you see how it works, you can customize the look and feel of the application to your website and then implement it.

After you have implemented the PHP Login Script, you will notice that each user has a "My Account" page. The page is the same for everyone and it is called "myaccount.php".

However, you also will notice that this page only provides data relevant to the user who is logged in at that time. This is done through something called a PHP session variable.

The PHP session variable contains the information about that particular user. To leverage the hidden value of the PHP Login Script, you simply need to use that session variable to provide detailed information only for that user.

In this way, you can leverage the PHP Login Script to be your customer database and then use it to provide customized output for users.

As a website owner, you will invariably come to a point where you need to provide access to certain files or directories only to certain people. Your web host provides this ability but only with very basic "directory authentication".

If you want to get more granular, and implement page specific web authentication using PHP and MySQL, the best application to do this is the free PHP Login Script. It provides all that you need to authenticate users, including a Captcha script to prevent spam bots.

And, if you dig under the hood a bit, the PHP Login Script does much more than this. It can become your centralized user database allowing you to provide customized web content to your users.

Article Source: http://EzineArticles.com/4243474

1 comment: