PHP remember me functionality works after pressing log in

Question

Hello i have encountered a problem implementing a remember me functionality in my test site. Currently i am trying to store the remember_me in a cookie that is set to expire 1 month from now. The idea is that when logging in if the user presses the remember me button he should stay logged in after he closes the browser and destroys the session and if he did not press the checkbox he should be logged out when the browser is closed (session destroyed). Currently it works, but only when the user presses the login button in the navbar (he skips the form and gets redirected to profil). What i want is the user to see the navbar that corresponds to a logged in user when he opens the index page without having to press log in. connect.php file:

 PDO::ERRMODE_EXCEPTION,
    PDO::ATTR_EMULATE_PREPARES => false
);

/**
 * Connect to MySQL and instantiate the PDO object.
 */
$pdo = new PDO(
    "mysql:host=" . MYSQL_HOST . ";dbname=" . MYSQL_DATABASE, //DSN
    MYSQL_USER, //Username
    MYSQL_PASSWORD, //Password
     $pdoOptions //Options
);
$pdo->query('SET NAMES utf8');

login.php:

prepare($sql);
        $stmt->execute([$username]);
        $user = $stmt->fetch(PDO::FETCH_ASSOC);

        $passwordHash = $user['password'];
        if (!password_verify($password, $passwordHash)) {
            setcookie('remember_me', '', time() - 100000);
            throw new Exception("Wrong username or password!");
        }
        else {
            if(isset($_POST['remember'])) {
                $month = time() + ( ( 3600 * 24 ) * 30 );
                setcookie('remember_me', $_POST['username'], $month);
            }
            else {
                $past = time() - 100;
                setcookie('remember_me', '', $past);
            }

            $hour = time() + 3600;
            setcookie('ID_my_site', $_POST['username'], $hour);

            $_SESSION['id'] = $user['id'];
            $_SESSION['user'] = $user['username'];
            header('Location: profile.php'); exit();
        }
//
//        $_SESSION['id'] = '';
//        $_SESSION['user'] = '';
//        header('Location: login.php');
//        exit;

    }
} catch (Exception $exception) {
    $error = $exception->getMessage();
}

?>

And here is the navbar that gets loaded in every page:



Quality House Beer

    
    
        
             HOME
             CATALOG
             ABOUT
             REGISTER
             LOGIN
             FAQ
             

        
             HOME
             CATALOG

             Add Beer
             SETTINGS
             LOGOUT
             
             
        
             HOME
             CATALOG
             ABOUT
             BASKET
             FAQ
             LOGOUT

Karlo Kokkak · Accepted Answer

The navbar code is not checking if remember cookie is set. That's why even if you are logged in via the cookie, the page renders you're not.

Add to the navbar code the below code. Add it just after require_once 'connect.php';

if( isset($_COOKIE['remember_me']) AND trim($_COOKIE['remember_me'] ) != "" ) {
    $_SESSION['user']  = $_COOKIE['remember_me'];
}

Also in navbar code, to treat empty $_SESSION['user'] as not logged:

Replace:

With:

New Code:



Quality House Beer

    
    
        
             HOME
             CATALOG
             ABOUT
             REGISTER
             LOGIN
             FAQ
             

        
             HOME
             CATALOG

             Add Beer
             SETTINGS
             LOGOUT
             
             
        
             HOME
             CATALOG
             ABOUT
             BASKET
             FAQ
             LOGOUT

PHP remember me functionality works after pressing log in

Answers (1)

Related Questions