User email verification in PHP + Login & Signup | source code included | Quick programming tutorial

Learn how to create user email verification for your website using PHP. you'll also learn how to make your own signup and login system.
00:00:00 Introduction
00:00:35 Components needed
00:01:55 Start the project
00:02:43 Create required files
00:07:40 Create signup form
00:22:00 Validate data
00:36:00 Create database and users table
00:46:40 Sign up done, boom!
00:46:46 Create login form
00:50:50 Intro to $_SESSION
00:57:30 Create check_login()
01:00:00 Create profile
01:00:50 The "thing" behind redirection
01:03:44 login.php not working? fix it
01:14:50 Create logout.php
01:17:25 Create verify.php
01:24:30 Pros of sending verification code
01:32:00 Create verify table
01:45:00 testing verify.php
01:53:20 Verify using email
01:58:00 Gmail or Yahoo! mail
02:00:10 Extract PHPMailer
02:00:36 Overview of mail.php
02:02:40 Update verify.php
02:03:00 send mail
02:05:40 Verification done and outro
thanks to Shubham singh for the chapters :)
source code:
drive.google.com/file/d/1Md69...
simple signup and login system with basic security:
• Simple signup and logi...
more tutorials:
make a social website from scratch:
• Social Website from sc...
all crash courses:
• JSON Crash Course in P...
code a live chat app in PHP and JavaScript:
• Live chat app from scr...
make an eCommerce website from template:
• #00 PHP Ecommerce webs...
convert an HTML template to PHP website:
• HTML Template to PHP W...
crop images with PHP:
• PHP - Web Design - How...
PHP Object Oriented Programming basics:
• #00 PHP Object Oriente...
Chart or graph using SVG:
• HTML Chart using SVG, ...
Responsive web design:
• Responsive Web Design ...
clean pretty URLs:
• PHP - How to get prett...
support me on patreon:
/ quickcode
my facebook:
quickcode

[@stealth2338]

God bless you brother, I Just completed my login page, after trying lots of others, this stands out

[@obesguan]

Best tutorials on KZbin, thank you so much!!! One follower for life of this channel!!

[@QuickProgramming]

Thanks for this wonderful endorsement, I really appreciate it. Am glad the video was useful too😊

[@Patrice-gd5tp]

Excellent Tutorials! Thank you

[@jaybaidoo2846]

Well done. Amazing everything I needed was here. So talented. Also after 2 hours of tiring programming you added source code for free. 😊😊

[@QuickProgramming]

You're most welcome and thanks for leaving some feedback😊😊

[@ajgeriane8584]

You got another subscriber :). I'm not into commenting in tutorials but this video makes myself to. The code is clean and the tutorial is clear. I want to say Thank you for everything. I can see your patience, hard work and talent in your video. I appreciate you bro, a lot.

[@QuickProgramming]

Thanks for the sub! and i highly appreciate your feedback. It helps me make more content :))

[@ajgeriane8584]

@@QuickProgramming Do you have a discord channel?

[@QuickProgramming]

@@ajgeriane8584 i dont have one because i wouldnt have time to manage it. but you can send me a message on facebook if you need to facebook.com/quickcode

[@life_with_masa]

Thank you so much...you deserve much more support ❤️

[@QuickProgramming]

Thank you☺️

[@danieligbinidu6880]

Keep it going you're really amazing i really appreciate your effort 💪🏽💪🏽💪🏽💪🏽

[@QuickProgramming]

thanks for your awesome feedback :D

[@pcprodoc]

This looks like it is object oriented using PDO whereas I have been learning functional with mysql. What I have taken from this is PDO can still use mysql statements as I was under the impression PDO was an entirely different storage facility. You should have stated this in your title as people like me may not want to waste 2 hours getting confused, but there was still a learning experience just the same. Thank you for another eye opener. I guess now I have to learn the difference between object oriented vs functional. I have to stick with functional as this is the path I chosen. I will be able to incorporate this into my already existing system with a few tweaks. Thumbs Up!

[@QuickProgramming]

glad you learnt something. PDO doesnt necessarily mean object oriented though. it can be used in procedural programming just as well. PDO is simply a universal way to connect to different databases. thats its primary job. it makes it easier to change database types at any time without having to change much of your code. it also works very well with prepared statements and thats why i prefer it. but i would encourage you to learn OOP. i have an entire playlist on my channel. OOP makes your code more scalable. i cant imagine building a large website without OOP. its the same way when first learning to code, you dont use functions. but after you learn them, you cant imagine not using them. thats how classes are like. once you learn them, you cant live without them, so give it a shot one day, that way you can work on any project that comes your way

[@mdal-aminkhanbishal4873]

You are a best teacher ❤❤❤❤

[@zawawii5196]

you've really saved my course project

[@QuickProgramming]

Glad to be of service❤️

[@rickxzz]

watched the vid and at the end I questioned myself: is it really free? thats such an amazing content! jokes apart, you're really going to save my course project! thank you so much! keep up the good content

[@QuickProgramming]

😁thanks for the awesome compliment🙂

[@justjocore]

That was one of the most helpful videos i've seen so far. At 1:12:30 Wasn't there the option to use password_verify() or wasn't that an option 2 years ago?

[@amingol3744]

It was awesome 👏👏👏👏🙏

[@kulmiyetechnologyWorld]

Thank you so much sir this is what i have been looking for 💞💞💞💞💞

[@QuickProgramming]

Am glad to hear it, you're most welcome

[@MOVIES_HUB120]

thanks brother, you are such a nice person

[@QuickProgramming]

Thanks for your kind words, I appreciate 😊

[@M.Hussein500]

Thank you for this, you are a life saver

[@QuickProgramming]

You're most welcome and thanks for your feedback

[@ZGDX_Smiling070]

❤❤❤❤❤ pls never stop helping fellow web devs

[@bhongosinxo6248]

I've been looking for something like this

[@CrustyCrazer]

I got your problem in the middle of the video. I guess you already found out, but if not: password_hash is different and much better than other hashing functions, because its *salted*. but therefore, to login you have to use password_verify($password, $hashed_password). $arr['email'] = $data['email']; $query = "select * from users where email = :email limit 1"; $row = database_run($query, $arr); if(is_array($row)){ $hash = $row[0]->password; if(password_verify($data['password'], $hash)) { $_SESSION['USER'] = $row; $_SESSION['LOGGED_IN'] = true; Thank you so much for everything!! I love your videos and I am learning a lot from them!

[@CrustyCrazer]

I would like to add a question: Why do you prefer working with $redirect at 60min of the video? Why not this shorter and simplier way: function check_login(){ if(isset($_SESSION['USER']) && isset($_SESSION['LOGGED_IN'])){ return true; }else{ header("Location: login.php"); die; }

[@shubh-kr]

You could really use the video chapters feature for long duration videos that KZbin provides. Your videos are very helpful but I'm wondering why you've got only 2226 views till date (2nd Jan 2022). In my opinion, if I want a quick solution to verifying an email problem or a quick solution to creating a signup form and php code for that or login code, I'd really love to jump to a specific timestamp in a video rather than sitting and watching it for the next 2 hours. By the way, I'm at 1:26:00 right now still 40 minutes to go and I'm really, really, really enjoying it. Thought you could use an another suggestion.

[@QuickProgramming]

thanks for the suggestion. i do add chapters on other videos but its time consuming and i have a lot of work to do. these videos are free and i dont get paid for making them, so its not really a good way to spend my time making chapters. if someone can chapter them, i can add the information to the description of pin the comment to help others

[@keepitsimple3645]

thanks your tutorial is very interesting

[@QuickProgramming]

you're most welcome :)

[@zawawii5196]

THANK YOU soooo much

[@jerryxu2204]

Hello sir, when I registered it for the first time it goes well, but for the second time when I register with another email, it didn't send me the code, while it shows "NULL" in verified email in localhost database. What's the problem with that?

[@haroldjosephmacuha9659]

hey bro thats amazing content this help me alot

[@haroldjosephmacuha9659]

thank you

[@QuickProgramming]

you're most welcome :)

[@E.R.E.N.T]

it work, thank you

[@QuickProgramming]

Awesome

[@EricAstarcom]

wonderful

[@QuickProgramming]

Cool

[@F_F996]

Hi sir! Please make a tutorial for signup using a Google account 🙏

[@priyankaa5557]

Nice

[@QuickProgramming]

Thanks

[@mahmudmustaphagana2692]

Thank you for this wonderful tutorial, I really appreciate it 👍 But, do you mean whenever you are going to sign up you must set your email account security as you did?

[@QuickProgramming]

at what video time is the issue you're talking about?

[@nigelpallatt]

I'm confused are you saying at 1:58:05 that my users have to have two-way authentication?

[@MrTyronM1]

To get the password hash to work instead you just need to do the following in login instead : if(is_array($row)){ $row = $row[0]; if(password_verify($data['password'],$row->password)){ $_SESSION['USER'] = $row; $_SESSION['LOGGED_IN'] = true; }else{ $errors[] = "wrong email or password"; } }else{ $errors[] = "wrong email or password"; } } It turns out you just need to use password verify instead as this extracts the salt from the stored hash, it combines it with the password provided by the user, hashes this combination, and then compares it with the stored hash. If they match, the password is correct.

[@dopamine9206]

thanks man

[@QuickProgramming]

Happy to help. you're most welcome :)

[@user-mk1yb7mz7k]

hello sir, how i can modify code so that user can verify after registeration and than login should be allowed??

[@jaybaidoo2846]

Is there a way I could apply the same method but to desktop application login not web page login please?

[@tylerflaviano2023]

Sir can you make a video tha show pogin in one tap!? I mean , if user is logged and close the browser don't insert anymore their details

[@swapCode]

Hello thank you so much for your lessons and we are witing for new things Quick Programming I just want to pay attion to something like when we use $errors variable that give us a error undifinde variable and I saw that you make a variable in the top of the page with a empty array but we can use isset($errors) and problem will solve with out add a empty value to the variable. So what do you think ?

[@QuickProgramming]

Thanks. if you have an empty variable at the top, there will be no need to use isset, meaning less code. The less code the better. But there are no right or wrong ways to do it. If it works fine for you, no problem, use isset() function. As long as you don't use too much code to do the same thing

[@swapCode]

@@QuickProgramming yeah right and that's amazing I agree with you I just was think when i use isset is better for code and clean So use variable is better than isset

[@MashuduDanielRambau]

Thanks for the wonderful tutorial, I have a question if I am using if($_SERVER['REQUEST_METHOD'] == "POST") and I have two forms on the same script how do I differentiate the both form if they are using post method

[@QuickProgramming]

if you have 2 forms, give each submit button a value, then check which value was submitted to know which form was clicked. e.g then use this in your php: if($_SERVER['REQUEST_METHOD'] == "POST"){ if(isset($_POST['form1'])){ //form 1 was submitted } if(isset($_POST['form2'])){ //form 2 was submitted } } another way is to add hidden fields with values unique to each form, then check which value was submitted to know which form was submitted. its exactly like this example except you're using hidden inputs instead of the submit button

[@MashuduDanielRambau]

@@QuickProgramming Thank you so much

[@ugurben]

kral kral

[@raksdigital5714]

Thank you sir .. but why it is not working on me? haven't receive any email. please help

[@torresjuven4929]

the please enter valid username is not showing, its shows blank page

[@kratos4358]

mail was not verified, still it is showing Verify Profile button. can any help me

[@farihasultana3550]

There is no error showing but nothing is inserted in verify table

[@christianelmartcruto1976]

good day, i tried the code but it's not sending verification email, can you help me sir fix this error

[@programmingstudent8238]

I like the tutorial, but I am stuck. I have been looking for similar tutorial with no luck 1. Lets say I want to retrieve the in session user data and make a profile that can be updated. 2. Retrieve all the data into a table, Do you have a tutorial covering that or documents you can refer or the syntax on how I can do that with PDO. I am still learning the concept of PDO and I would appreciate any help

[@programmingstudent8238]

I want some along these code $currentuser = $_SESSION['USER']->id; function getuserdata($currentuser) { $query = "select * from users where id = '$currentuser' limit 1"; $row = database_run($query); }

[@QuickProgramming]

this will give you the concepts of PDO kzbin.info/www/bejne/rV7Lkodnnb2goMU but you can watch my other series on setting up user profiles etc. the series are long but you can always stop once you learn enough. social website from scratch kzbin.info/www/bejne/jJaymaZ-oLKUgbM live chat kzbin.info/www/bejne/rHzUfWiFgpuef80 student management system kzbin.info/www/bejne/sKWneIegjdGMa7c

[@nbn7950]

Its says wrong code after receiving from gmail what to do??

[@dreamweaver2335]

Thank you sir for the detailed instruction, but since May 30, 2022 Google changed their policy: Google no longer supports the use of third-party apps or devices which ask you to sign in to your Google Account using only your username and password. The same issue is with yahoo as well. Any advices on how to be able to send mails sir?

[@QuickProgramming]

Are you sending from localhost or you'll be using a live server eventually?

[@rabishmahto7216]

Not getting emails from localhost

[@haroldjosephmacuha9659]

can you make a tutorial about phone login and sign up using twillio

[@rightokon3139]

Why is my code not working on function 94

[@obeidfouad1011]

please, I have a problem that I'm receiving a code in my database (phpmyadmin) but not receiving any E-mail, I don't really know what's the problem, can you help?

[@QuickProgramming]

there is an easier way to send emails but you need to use a live server for it to work. it doesnt work on local host. so create your code locally but test it on an online server. its as simple as using one function like this: $email = "[e-mail]"; $subject = "My subject"; $msg = "my message"; mail($email,$subject,$msg); you can use this instead, but it only works on a live server

[@martinemmanual1094]

Hi i liked ur video and learned a more a lot in the complete login and sign up....Canu tel me how to host this is in live server

[@QuickProgramming]

to host, simply copy the files to the public_html folder on the online server, then export your database and import it into an online database you create. thats pretty much it. but when you have time, watch this other video for some basic security habits as well. more knowledge is always better kzbin.info/www/bejne/pnqyYaOjgrl9bLs

[@martinemmanual1094]

@@QuickProgramming Actually first I tired uploading the files as u said and did everything propelly

[@martinemmanual1094]

@@QuickProgramming but it is not working

[@martinemmanual1094]

@@QuickProgramming thanks for the reply

[@jimohfaruqozovehe1361]

Nice tutorial......but I can't use php mailer is not working anymore..... please could you make a tutorial that uses nodemailer Thank I'll be great if I get a prompt response

[@QuickProgramming]

i use phpmailer in my projects and it works fine. i just used it yesterday on a project and it worked fine. If you're using a live server, you dont need an third party classes, just use the mail() function, it works fine too but doesnt work on localhost. check php.net on how to use the mail function. they have plenty of example you can simply copy and paste

[@soomann2716]

One thing I found is Suppose if a user tries to sign in but not verify his email...then neither user can log in and his signup details will be saved in database even though his account is not verified.Any solution to it? Because if he didnt verify his email after certain time his details should be disappeared from the database

[@QuickProgramming]

there is no need to delete user details even for non verified accounts, because the same user can come back after a month or even 6 months to try and signup again and you can save time by simply telling them to verify their email. secondly deleting rows from your database slows down your database because the index must be reset to account for the missing rows. Its better to just leave the rows. thirdly it simply adds code you dont really need. Dont make your apps more complicated than they need to be. A database can handle a billion rows without any problem. i doubt you will ever get 1 billion users on your platform so dont worry about it. Even if everyone on the planet signed up to your app and only 10 people were active, your database will work just fine

[@soomann2716]

@@QuickProgramming thanks for clearing the doubt

[@katzpagdanganan7719]

Hello, does it still work smoothly if many users registers and verify at the same time?

[@QuickProgramming]

Yes it works just fine even with multiple users

[@katzpagdanganan7719]

@@QuickProgramming how to make it like after clicking the register it will automatically go straight to verify and you cannot login if you are not verified?

[@cjosiahonuoha8295]

Please if the site is online, how do u make it send code, since we are not using gmail or yahoo there

[@QuickProgramming]

You can still use Gmail or Yahoo even there. But if you want to have the email look like "email@your_domain.com", then create your email address using your hosting account. Every hosting account comes with email features to allow you to create email addresses. Then you can choose one of those emails to use. Use the email and the email password. As for SMTP server name, check your hosting account details. It's usually displayed somewhere or you can ask your hosting provider for it.

[@cjosiahonuoha8295]

@@QuickProgramming thanks sir

[@AsadKhan-wc9jx]

Hello sir i am in big trouble need your help badly.

[@joyannevalmores8349]

Thank you .this video help me with my project . But i don't know to set the login page to be log in using username or email . Please help me 🥺

[@QuickProgramming]

watch some more videos ive done on login and signup here. they will help you understand. watch all three if possible. in case they all dont solve your problem, let me know afterwards so i can find you a solution. kzbin.info/www/bejne/jYrYl4Z9nMZ2kJo kzbin.info/www/bejne/r56znZWdr5t1pbc kzbin.info/www/bejne/pnqyYaOjgrl9bLs

[@amirayuuki6636]

if there is another life, i would definitely marry you my guy. out of many tut yours the one works the best. god bless you. you just save my grade from failling.

[@amirayuuki6636]

THANK YOU SO MUCH

[@QuickProgramming]

Hahaha thanks for the compliment😂 am glad to have saved your grade😁 you're most welcome

[@amirayuuki6636]

@@QuickProgramming can you do one with update? im having problem with update data to the database

[@a1appbuilder]

any instructions on what to do since google close the use of less secure apps

[@QuickProgramming]

I need to check that, but securing your app is easy because you simply need an SSL certificate on your domain, I.e HTTPS instead of HTTP. Every hosting company now offers one for free when you first signup

[@evangienielacuna3476]

Hi. Thank you it's working😭 Can you put an CSS on it? Thank you

[@QuickProgramming]

you're most welcome! you can put css on it yes

[@soself_learner412]

Hi man, I need some help. may I have your email or something to contact you cuz got a lot of error when using the code below from the mail.php $mail->MsgHTML($content); if(!$mail->Send()) { echo "Error while sending Email."; echo ""; var_dump($mail); return false; } else { echo "Email sent successfully"; return true; } Then the var_dump show me the object or array info.. but I don't quite understand.

[@soself_learner412]

ok, suddenly problem or bug settle but may I know this kind of methods only work on one account ??

[@QuickProgramming]

its good you solved the problem. this method can work on any number of accounts as long as you enter the correct details. but there is no need to use multiple accounts. if you have a website were you want to be sending multiple emails to clients, you just need to open a company email and use that. if you want each user on your website to use their own email address, then you'll need to make the username and password as variables that you can input in the function depending on which user is logged in. but i dont recommend this since each user has to allow access to your app from their email settings, so this is not reliable. better to use only one company account to send all emails

[@soself_learner412]

@@QuickProgramming Ok, got it. Thank your explanation and suggestion. I will take more time to learn it.

[@muhammadrasyaasysyifa9026]

how to solve such error Warning: Undefined property: stdClass::$email_verified in C:\xampp\htdocs\verify\functions.php on line 137

[@QuickProgramming]

remove the dollar sign on $email_verified

[@AsadKhan-wc9jx]

What about forgot password?

[@savy5435]

Good day my good sir, please im so sorry to bother you with this, but do u have anything on reset password, thank you

[@QuickProgramming]

its no bother. yes i do have a tutorial on that here kzbin.info/www/bejne/mXLHeoiZpMeLl5I

[@savy5435]

@@QuickProgramming thank you for your reply

[@ankansamanta4533]

Can its api be made? So that I can use it in Android app

[@QuickProgramming]

you dont need an api to use an android app. just connect your app to the database the same way you connect a website to a database. no api is needed

[@ankansamanta4533]

how can i use it in Android studio

[@tylerflaviano2023]

no error but I am not recieving the code in my email account , help me please sir

[@belkisexo6670]

Did you find out the problem? Because I have the same

[@johnvincentalmonia8880]

Same bro. How did you fix that bug?

[@aya_momin]

its two factor authentication ?

[@QuickProgramming]

The code can be used for that too, but this email verification after signup

[@henrichbryanchiongmaya6709]

WHY MY FILTER_VALIDATE_EMAIL DON'T WORK? PLEASE HELP ME...

[@QuickProgramming]

its usually if you spell it incorrectly or something is missing in the code. please check it letter by letter to confirm everything is correct

[@henrichbryanchiongmaya6709]

@@QuickProgramming it is not really working, I check it for almost 3 hours. :((

[@swapCode]

Hello again Quick Programming for the problem when you try to login and the password keep change because of function password_hash you can solve it but using password_verify that take the login password from the user without hashing and take the password from the databse and it's check if it's the same or no liek that: if (count($errors) == 0) { $arr[':email'] = $data['email']; $pass = $data['password']; // don't hash the password $query = 'SELECT * FROM users WHERE email = :email limit 1'; $row = database_run($query, $arr); if (is_array($row)) { if ( password_verify($pass, $row[0]->password) ) // here we use the function { $_SESSION['USER'] = $row; $_SESSION['LOGGED_IN'] = true; } } else { $errors[] = 'Email or Password not correct'; } }

[@QuickProgramming]

Thanks for the tip, yes I figured that out much later and have used it in other tutorials already. This was the first time I was using password_hash. I normally use hash() function

[@swapCode]

​@@QuickProgramming yeah great. I will share the source code of the login form that I made with you I have just a little difreent of strutcer and I would like if you could check it for me if it's amazing and give me some advice Where I can send you my source code here or any other platform of social media?

[@oamioxmocliox8082]

;)

[@gfjwgldwzqfdkgdhdfdjledkdd9856]

woah thats hard

[@filippohinceanu7392]

the reset password?

[@QuickProgramming]

here kzbin.info/www/bejne/mXLHeoiZpMeLl5I

[@filippohinceanu7392]

it's amazing that it takes so many hours of programming for things that don't last long

[@QuickProgramming]

@@filippohinceanu7392 well, i guess thats why programmers are paid so much🙂 coding takes too much patience, its like animation

[@filippohinceanu7392]

@@QuickProgramming the page works and sends the data, but the latter are not entered into the database

[@mushlee_tbe]

hello @Quick Programming i need help ..... Fatal error: Uncaught PDOException: SQLSTATE[42S02]: Base table or view not found: 1146 Table 'verify_db.verify' doesn't exist in C:\xammp new\htdocs\verify\functions.php:98 Stack trace: #0 C:\xammp new\htdocs\verify\functions.php(98): PDOStatement->execute(Array) #1 C:\xammp new\htdocs\verify\verify.php(19): database_run('insert into ver...', Array) #2 {main} thrown in C:\xammp new\htdocs\verify\functions.php on line 98

[@QuickProgramming]

that means you havent created the verify table inside the verify_db database

[@rwema]

Youre Amazing!!!!!!!🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰

[@QuickProgramming]

Thanks 🙂

[@amingol3744]

I would like to give you 1000 likes but only 1 like I can, thank you so much, I have watched many tutorials from many channels but I recommend to all people that subscribe you immediately.

[@QuickProgramming]

thank you, i appreciate your compliment and support :))