Share My Creation (PHP/MySQL/API) User Login App

aeric · May 15, 2020

Web API

Updates:
Latest B4XPages user login client apps (using B4J server): https://www.b4x.com/android/forum/threads/project-template-user-login-client-b4x.161914/ Older project: https://www.b4x.com/android/forum/t...ver-key-token-and-b4x-user-login-apps.126081/

Android App

aeric said:
This is the 3rd version of login example I share in this forum.

The first version I shared when I started learning B4A is just a very simple login app.
Http Login example using HttpUtils2

Later, I have shared a tutorial in Code Snippet title:
Register User example using OKHttpUtils2

Both of the samples I shared are using very simple PHP with mysql_query function. I have later updated the 2nd sample with mysqli since mysql functions are deprecated in PHP.

Recently I am thinking to update the sample project with what I have learned in this few years. I have seen some members here are still using mysqli but I want to introduce the use of PDO in PHP. The sample I shared here is just intended for learning purpose. Anyone are welcome to extend it to become a production ready and more powerful app. For example, In my real app, I have a function to upload profile photo. I remove the feature to leave it to members here to find out how to do it. The answer is in this forum and the Internet.

In my previous code snippet, I use 6 digit security code but in this latest version, I have used a 32 characters MD5 string for the code in email confirmation.

The PHP app I share here is a cut down version of PHP backend I use in production. It is based on MVC concept where it provides a web application front-end and includes php session and some other security. I think I don't need to share much on the "View" part of the MVC. I just modified it to become the "API" to consume by the B4A app. However, I use the View part to show a documentation on how to use the API as you can see in the screenshots. For the "Model" part, I only include "User" and "Password". It is easy to extend to more models. For example, I could have add "Driver" and "Order" model for the e-hailing app or "Student" and "Courses" models to my e-learning app.

carycai · May 21, 2020

Good job. I am very interesting in your web API management platform(like Swagger),what is it?

OliverA · May 21, 2020

All this reminds me of a project @alwaysbusy was working on: https://www.b4x.com/android/forum/threads/okapis-rest-api-builder-en-documenter.92109/#content
Wonder what happened...

aeric · May 21, 2020

carycai said:
Good job. I am very interesting in your web API management platform(like Swagger),what is it?

No, I don't use any tool or framework. The JSON is echo out from PHP json_encode() function.

aeric · May 21, 2020

OliverA said:
All this reminds me of a project @alwaysbusy was working on: https://www.b4x.com/android/forum/threads/okapis-rest-api-builder-en-documenter.92109/#content
Wonder what happened...

I never know about this. It looks great.

TILogistic · May 21, 2020

carycai said:
Good job. I am very interesting in your web API management platform(like Swagger),what is it?

It's excellent,

This API CLOUD flow and control platform.

API Documentation & Design Tools for Teams | Swagger

Simplify API development for users, teams, and enterprises with our open source and professional toolset. Find out how Swagger can help you and get started today.

swagger.io

For the processing of data distributed on different servers.

The bad thing is that you do not have control of the web API server (in case of availability and contingencies).

TILogistic · May 21, 2020

OliverA said:
All this reminds me of a project @alwaysbusy was working on: https://www.b4x.com/android/forum/threads/okapis-rest-api-builder-en-documenter.92109/#content
Wonder what happened...

I have reviewed the BANnano Framework and use it as a guide.

As an example this:

[BANano] Authentication to a B4J server (REST API)

Here is an example on how to connect with a Jetty B4J server. The example shows how you could use the B4J server to login/logoff and run a basic REST API call. The project zip file is in post #3 Together, they make a very powerful solution! Note: because it needs a Cookie, you must run it on...

www.b4x.com

Hedgar · May 23, 2020

Thank you sir. How can i fully implement this without a domain? i.e using apache

aeric · May 23, 2020

Hedgar said:
Thank you sir. How can i fully implement this without a domain? i.e using apache

You can run locally using software like xampp or usbwebserver. I prefer Laragon Full with Apache.

Inside config.php, comment out the setting for PRODUCTION section and uncomment the settings for DEVELOPMENT section:

PHP:

// Define URL

// DEVELOPMENT (local server)
define("ROOT_PATH", "/api/");
define("ROOT_URL", "http://127.0.0.1:8000/api");
// define("ROOT_URL", "http://192.168.0.6:8000/api");

// PRODUCTION - using subdomain
// define("ROOT_PATH", "");
// define("ROOT_URL", "http://api.computerise.my/");

define("DEVELOPMENT", "TRUE");

aeric · May 28, 2020

B4J implementation (JRDC2 server) is working in progress.

Alexander Stolte · Jun 5, 2020

oparra said:
Very soon I will publish a tutorial.

Any news about it?

luqmanhaidar · Jun 9, 2020

aeric said:
Android App
View attachment 94107 View attachment 94108 View attachment 94111 View attachment 94112
View attachment 94109
View attachment 94110
Web API
View attachment 94106
View attachment 94119
View attachment 94118
Download APK: https://api.computerise.my/apk/app.apk

how to make auto login in app?

aeric · Jun 9, 2020

luqmanhaidar said:
how to make auto login in app?

What do you mean auto login? You mean keep the login session time extend longer?

luqmanhaidar · Jun 9, 2020

aeric said:
What do you mean auto login? You mean keep the login session time extend longer?

yes, and when the application is closed and when it is restarted it is still logged in , I try AHPreferenceActivity lib but if password change in mysql still save session with previous password change password has no effect

aeric · Jun 9, 2020

You can save some values using text files, keyvaluestore or sqlite database. How you implement the security is up to you.

aeric · Jun 29, 2020

aeric said:
B4J implementation (JRDC2 server) is working in progress.

The B4J API server is done now. ~~Maybe it is not so stable but~~ It is quite stable now. All APIs are working like in PHP server. You can use Postman to test the API too.

You can download App.zip in post #2 and what you only need to do is change the strURL in Process_Globals in Starter service and it works!

B4X:

'Dim strURL As String= "https://api.computerise.my/"        ' Remote / Production (Sharehosting/PHP)
Dim strURL As String = "https://api.puterise.com:17179/"    ' Remote / Production (VPS/B4J)

For the time being, I am not going to share the source for B4J unless with some donation.

aeric · Jun 30, 2020

Biswajit said:
Create a mysql event

set that to run at every 5 minute

delete all tokens older than 1day or whatever timespan you want.

On every request check if the token is exist or not. If not exist inform the app to show the login screen again.

Is this okay?

SQL:

CREATE EVENT clear_user_api_key_every_hour
ON SCHEDULE EVERY 1 HOUR
STARTS CURRENT_TIMESTAMP
ENDS CURRENT_TIMESTAMP + INTERVAL 12 MONTH
ON COMPLETION PRESERVE
DO
   UPDATE tbl_users SET user_api_key = NULL
   WHERE user_last_login_at < NOW() - INTERVAL 1 HOUR;

To enable the event:

SQL:

SET GLOBAL event_scheduler = ON;

Alexander Stolte · Jun 30, 2020

aeric said:
Is this okay?

what happens if the API key is deleted and the user still works with the API?

aeric · Jun 30, 2020

Alexander Stolte said:
what happens if the API key is deleted and the user still works with the API?

~~I think need to force him to relogin.~~
Edit: Better to create a Token field and delete it every interval. APIKey should not be deleted.

SQL:

CREATE EVENT clear_user_token_every_hour
ON SCHEDULE EVERY 1 HOUR
STARTS CURRENT_TIMESTAMP
ENDS CURRENT_TIMESTAMP + INTERVAL 12 MONTH
ON COMPLETION PRESERVE
DO
   UPDATE tbl_users SET user_token = NULL
   WHERE user_last_login_at < NOW() - INTERVAL 1 HOUR;

Biswajit · Jul 1, 2020

aeric said:
~~I think need to force him to relogin.~~
Edit: Better to create a Token field and delete it every interval. APIKey should not be deleted.

SQL:

CREATE EVENT clear_user_token_every_hour ON SCHEDULE EVERY 1 HOUR STARTS CURRENT_TIMESTAMP ENDS CURRENT_TIMESTAMP + INTERVAL 12 MONTH ON COMPLETION PRESERVE DO UPDATE tbl_users SET user_token = NULL WHERE user_last_login_at < NOW() - INTERVAL 1 HOUR;

You don't have to specify the start and end time. Just the Event name, Schedule interval and the job that has to be done,

SQL:

CREATE EVENT clear_user_token_every_hour
ON SCHEDULE EVERY 1 HOUR
DO
   UPDATE tbl_users SET user_token = NULL
   WHERE user_last_login_at < NOW() - INTERVAL 1 HOUR;

aeric said:
SET GLOBAL event_scheduler = ON;

Check the event_scheduler status:

SHOW PROCESSLIST;

If you see something like this then its already running.

If not then run your global scheduler query.

Vimalraj S · Aug 18, 2020

aeric said:
B4A User Login App (App.zip)
Note: In Starter module, under Process_Globals, you can change the values to your own values.

B4X:

'Dim strURL As String = "http://172.20.10.6:8000/api/" ' Local / Development (Hotspot) Dim strURL As String= "https://api.computerise.my/" ' Remote / Production Dim DEMO_EMAIL As String = "myemail@gmail.com" Dim DEMO_PASSWORD As String = "mydemopass" Dim DEV As Boolean = True

PHP Web API (api.zip)
SQL script to create the database is included in the zip file.
Note: In my shared hosting, I need to rename folders in views to start with capital letter. Example: wwwroot/api/views/Home.

View attachment 94217

Looking very nice friend, And thanks a lot for sharing ..

Share My Creation (PHP/MySQL/API) User Login App

Member

Expert

Expert

Expert

Expert

Expert

Member

Expert

Expert

Expert

Member

Expert

Member

Expert

Expert

Expert

Expert

Expert

Active Member

New Member

Similar Threads

Privacy & Transparency

Privacy & Transparency