That tutorial

[cluelessPHP]

Well this is the tutorial I mentionted in using printf

It's long so I thought I'd put it here because...erm reasons?

index.php

<?php
	require_once 'core/init.php';

if(Session::exists('home')){
	echo '<p>' . Session::flash('home', 'You have been registered and can now log in!') . '</p>';
}
$user = new User();
if($user->isLoggedIn()){
	echo'</a> <br /></p>';
?>

</div>
<div id ="wrapper">
		<div id="userinfo">
			<a href="profile.php?user=<?php echo escape($user->data()->username);?>"><?php echo escape($user->data()->username);?></a>
		</div>
		<ul>
			<li> <a href="update.php">Update details</a></li>
			<li> <a href="changepassword.php">Change password</a></li>
			<li> <a href="logout.php">Log out</a></li>
			<li><?php  if($user->hasPermission('admin')){
		echo 'Admin';
	} ?>  </li>

	</ul>

	<div id ="login">
		<?php	
		} else {

				require_once 'login.php';
				?>
			<a href="login.php">Login</a>	
			<?php
				}
			?>

	</div>
</div>		

[cluelessPHP]

profile

<?php
require_once 'core/init.php';

if(!$username = Input::get('user')){
	Redirect::to('index.php');
} else {
	$user = new User($username);
	if(!$user->exists()){
		Redirect::to(404);
	} else {
		$data = $user->data();

	}
?>

<h3><?php echo escape($data->username);?> </h3>
<p>Full name: <?php echo escape($data->name);?>  <br /></h3>
<?php
}

?>

<a href="index.php">Home</a>

[cluelessPHP]

register.php

<?php
require_once 'core/init.php'; 


if (Input::exists()){
	if(token::check(Input::get('token'))){
		$validate = new Validate();
		$validation = $validate->check($_POST, array(
			'username' => array(
				'required' => true,
				'min' => 2,
				'max' => 20,
				'unique' => 'users'
			),
			'password' =>  array(
				'required' => true,
				'min' => 6
			),
			'password_again' => array(
				'required' => true,
				'matches' => 'password'
			),
			'name' => array(
				'required' => true,
				'min' => 2,
				'max' => 50
			),

	));

	if($validation->passed()){
		$user = new User();

		$salt = Hash::salt(32);
		try{

			$user->create(array(
				'username' => Input::get('username'),
				'password' => Hash::make(Input::get('password'), $salt),
				'salt'	   => $salt,
				'name'     => Input::get('name'),
				'joined'   => date('Y-m-d H:i:s'),
				'group'    => 1
			));

				 Session::flash('home','You have been registered and can now log in.');
            Redirect::to('index.php');

		} catch(Exception $e){
			die($e->getMessage());
		}
	}else {
		foreach($validation->errors() as $error){
			echo $error .'<br />';
		}
	}
}
}
?>

<form action="" method="POST">
	<div class="field">
		<label for="username">Username </label>
		<input type="text" name="username" id="username" value="<?php echo escape(Input::get('username'));?>" autocomplete="off">
	</div>

	<div class="field">
		<label for="password"> Choose a password</label>
		<input type="password" name="password" id="password">
	</div>

	<div class="field">
		<label for="password_again"> Repeat password</label>
		<input type="password" name="password_again" id="password_again">
	</div>

	<div class="field">
		<label for="name">Your name</label>
		<input type="text" name="name" value="<?php echo escape(Input::get('name'));?>" id="name" autocomplete="off">
	</div>
	<input type="hidden" name="token" value="<?php echo token::generate();?>">
	<input type ="submit" value="Register">
</form>	
<a href="index.php">Home</a>

[cluelessPHP]

update.php

<?php
require_once 'core/init.php';

$user = new User();

if(!$user->isLoggedIn()) {
	Redirect::to('index.php');
}

if(Input::exists()){
	if(Token::check(Input::get('token'))){

	$valiate = new Validate();
	$validation = $valiate->check($_POST, array(
		'name' => array(
			'required' => true,
			'min' => 2,
			'max' => 50
		)
	));

	if($validation->passed()){

			try{
				$user->update(array(
					'name' => Input::get('name')
				));

				Session::flash('home', 'Your details have been updated.');
				Redirect::to('index.php');
			} catch(Exception $e){
				die($$e->getMessage());
			}
	}else{
		foreach($validation->errors() as $error){
			echo $error, '<br />';
		}

	}
}
}
?>


<form action="" method="post">
	<div class="field">
		<label for="name">Name </label>
		<input type="text" name="name" value="<?php echo escape($user->data()->name); ?>">

	<input type="submit" value="Update">

	<input type="hidden" name="token" value="<?php echo Token::generate();?>">
</div>


</form>

[cluelessPHP]

users.php

<?php
header('Content-Type: application/json');
require_once 'core/init.php';


if(!isset($_GET['query'])){
	echo json_encode([]);
	exit;
}

$users = $db->prepare("
	SELECT id, username
	FROM users
	WHERE username LIKE :query
");

$users->execute([
	'query' => "$_GET{['query']}%"
]);

echo json_encode($users->fetchAll());

[cluelessPHP]

changepassword.php

<?php
require_once 'core/init.php';

$user = new user();

if(!$user->isLoggedIn()) {
	Redirect::to('index.php');
}

if(Input::exists()){
	if(Token::check(Input::get('token'))){
		$validate = new Validate();
		$validation = $validate->check($_POST, array(

		'password_current' => array(
		'required' => true,
		'min' => 6
	),
		'password_new' => array(
		'required' => true,
		'min' => 6
	),
		'password_new_again' => array(
			'required' => true,
			'min' => 6,
			'matches' => 'password_new'
		)
	));

	if($validation->passed()){

	if(Hash::make(Input::get('password_current'), $user->data()->salt) !== $user->data()->password){
		echo 'Incorrect password';
	} else {
		$salt = Hash::salt(32);
		$user->update(array(
			'password' => Hash::make(Input::get('password_new'), $salt),
			'salt' => $salt
		));

		Session::flash('home', 'Your password has been updated');
		Redirect::to('index.php');
	}

	}else {
		foreach($validation->errors() as $error){
			echo $error, '<br />';
		}
	}
}
}
?>

<form action="" method ="post">
	<div class ="field">
		<label for= "password_current">Current password</label>
		<input type = "password" name ="password_current" id = "password_current">
	</div>

<div class ="field">
	<label for= "password_current">Update password</label>
	<input type = "password" name ="password_new" id = "password_new">
</div>

<div class ="field">
	<label for= "password_current">Repeat new password</label>
	<input type = "password" name ="password_new_again" id = "password_new_again">
</div>

<input type="submit" value="Update">
<input type="hidden" name="token" value="<?php echo Token::generate();?>">
</form>

[cluelessPHP]

logout.php

<?php 
	require_once 'core/init.php';

$user = new User();	
$user->logout();

Redirect::to('index.php');

[cluelessPHP]

login.php

<?php
require_once 'core/init.php';

if(Input::exists()){
	if(Token::check(Input::get('token'))){

	$validate = new Validate();
	$validation = $validate->check($_POST, array(
		'username' => array('required' => true),
		'password' => array('required' => true)
	));

	if ($validation->passed()){
		//log user in
		$user = new User();

		$remember = (Input::get('remember') === 'on') ? true : false;
		$login = $user->login(Input::get('username'), Input::get('password'), $remember );

		if($login){
			Redirect::to('index.php');
		}else{
			echo'<p>Sorry invalid details</p>';
		}
	} else{
		foreach($validation->errors() as $error)
			echo $error, '<br />';
	}
}
}

?>
<form action="" method="POST">
	<div class="field">
		<label for="username" id="username"> Username </label>
		<input type="text" name="username" id="username" autocomplete="off">
	</div>

<div class="field">
	<label for="password" id="password"> Password </label>
	<input type="password" name="password" id="password" autocomplete="off">
</div>

<div class="field">
	<label for="remember">
		<input type="checkbox" name="remember" id="remember"> Remember me
	</label>
</div>

<input type="hidden" name="token" value="<?php echo Token::generate();?>">
<input type="submit" value="Login">
</form>	
<a href="register.php">Register</a>

[cluelessPHP]

sanitize.php

<?php
	function escape($string){
		return htmlentities($string, ENT_QUOTES, 'UTF-8');
	}

?>	

[cluelessPHP]

init.php

<?php
	session_start();

ini_set('display_errors', 1);
error_reporting(E_ALL);

$GLOBALS['config'] = array(
	'mysql' => array(
		'host' => '127.0.0.1',
		'username' => 'root',
		'password' => '',
		'db' => 'oopdatabase'
	),
	'remember' => array(
		'cookie_name' => 'hash',
		'cookie_expiry'=> 604800
	),
	'session' => array(
		'session_name' => 'user',
		'token_name' => 'token'

	)
);

spl_autoload_register(function($class){
	require_once 'classes/' . $class. '.php';
});

require_once 'functions/sanitize.php';


if(Cookie::exists(Config::get('remember/cookie_name')) && !Session::exists(Config::get('session/session_name'))){
	$hash = Cookie::get(Config::get('remember/cookie_name'));
	$hashCheck = DB::getInstance()->get('users_session',array('hash', '=', $hash));

if($hashCheck->count()) {
	$user = new USer($hashCheck->first()->user_id);
	$user->login();
}
}

[cluelessPHP]

redirect.php

<?php
class Redirect{
	public static function to($location = null){
		if($location) {
			if(is_numeric($location)){
				switch($location){
					case 404:
						header('HTTP/1.0 404 Not Found');
						include 'includes/errors/404.php';
						exit();
					break;
				}
			}
			header('Location:' . $location);
			exit();
		}
	}
}

[cluelessPHP]

input.php

<?php
class Input{
	public static function exists($type = 'post'){
		switch($type){
		case 'post':
			return(!empty($_POST)) ? true : false;
		break;

	case 'get';
		return(!empty($_GET)) ? true : false;
	break;

	default;
		return false;
	break;	
	}
}

	public static function get($item){
	if(isset($_POST[$item])){
		return $_POST[$item];
		}else if(isset($_GET[$item])){
			return $_GET[$item];
		}
		return '';
	}	

}

[cluelessPHP]

salt

<?php
class Hash{
	public static function make($string, $salt =''){
		return hash('sha256', $string . $salt);
	}

public static function salt($length){
	return mcrypt_create_iv($length);
}

public static function unique(){
	return self::make(uniqid());
}

}

[cluelessPHP]

db

<?php
class DB{
	private static $_instance = null;
	private $_pdo, 
			$_query, 
			$_error = false,
			$_results, 
			$_count = 0;

	private function __construct(){
		try{
			$this->_pdo = new PDO('mysql:host=' . Config::get('mysql/host') . ';dbname='. Config::get('mysql/db'), Config::get('mysql/username'), Config::get('mysql/password'));
		}catch(PDOException $e){
			die($e->getMessage());
		}
	}	

public static function getInstance(){
	if(!isset(self::$_instance)){
		self::$_instance = new DB();
	}
	return self::$_instance;
}

public function query($sql, $params = array()) {
	$this->_error = false;
	if($this->_query = $this->_pdo->prepare($sql)){
	$x = 1;
		if(count($params)) {
			foreach($params as $param) {
				$this->_query->bindValue($x, $param);
					$x++;
			}
		}
	if($this->_query->execute()){
		$this->_results = $this->_query->fetchAll(PDO::FETCH_OBJ);
		$this->_count = $this->_query->rowCount();
	}	else{
		$this->_error = true;	
		}
	}
	return $this;
}

private function action($action, $table, $where = array()){
	if(count($where) === 3) {
		$operators = array('=', '>', '<', '>=', '<=');

			$field   = $where[0];
			$operator = $where[1];
			$value   = $where[2];

		if(in_array($operator, $operators)){
			$sql = "{$action}  FROM {$table} WHERE {$field} {$operator} ?";
			if(!$this->query($sql, array($value))->error()){
				return $this;
			}
		}	
	}
	return false;
}

public function get($table,$where){
	return $this->action('SELECT *', $table, $where);
}

public function delete($table, $where){
	return $this->action('DELETE', $table, $where);
}

public function insert($table, $fields = array()){
	if(count($fields)){
		$keys = array_keys($fields);
		$values = '';
		$x= 1;

		foreach($fields as $field){
			$values .= '?';
			if($x < count($fields)){
				$values .= ', ';
			}
			$x++;
		}

		$sql = "INSERT INTO {$table} (`" . implode('`, `', $keys) . "`) VALUES ({$values})";

		if(!$this->query($sql, $fields)->error()){
			return true;
		}
	}
	return false;
}

public function error(){
	return $this->_error;
}

	public function update($table, $id, $fields)
{
	$set = '';
	$x   = 1;
	foreach($fields as $name => $value)
	{
		$set .= "{$name} = ?";
		if($x < count($fields))
		{
			$set .= ", ";
		}
		$x++;
	}
	$sql = "UPDATE {$table} SET {$set} WHERE id = {$id}";

	if(!$this->query($sql, $fields)->error())
	{
		return true;
	}
	return false;
}
public function results(){
	return $this->_results; 
}
public function first(){
	return $this->_results[0];
}

public function count(){
	return $this->_count;
}
} 	

[cluelessPHP]

cookie

<?php
class Cookie{
	public static function exists($name){
		return(isset($_COOKIE[$name])) ? true : false;
	}

public static function get($name){
	return $_COOKIE[$name];
}

public static function put($name, $value, $expiry){
	if(setcookie($name, $value, time() + $expiry, '/')){
		return true;
	}
return false;	
}

public static function delete($name){
	//delete
	self::put($name, '', time() - 1);
}
}

[cluelessPHP]

config

<?php
	class Config{
		public static function get($path = null){
			if($path){
				$config =$GLOBALS['config'];
				$path = explode ('/', $path);

			foreach($path as $bit){
				if(isset($config[$bit])) {
					$config = $config[$bit];
				}
			}
			return $config;
		}
		return false;
	}
}

validate

<?php
class Validate{
	private $_passed = false,
			$_errors =array(),
			$_db = null;

public function __construct(){
	$this->_db = DB::getInstance();
}

public function check($source, $items = array()){
	foreach($items as $item =>$rules){
		foreach($rules as $rule => $rule_value){

			$value = trim($source[$item]);
			$item = escape($item);

			if ($rule === 'required' && empty($value)){
				$this->addError("{$item} is required");
			} else if(!empty($value)){
				switch($rule){
					case 'min':
						if(strlen($value) < $rule_value){
							$this->addError("{$item} must be a minimum of {$rule_value} characters.");
						}
					break;
					case 'max':
					if(strlen($value) > $rule_value){
							$this->addError("{$item} must be a maximum of {$rule_value} characters.");
						}
					break;
					case 'matches':
						if($value != $source[$rule_value]){
							$this->addError("{$rule_value} must match {$item}");
						}
					break;
					case 'unique':
						$check = $this->_db->get($rule_value, array($item, '=', $value));
						if($check->count()){
							$this->addError("{$item} already take.");
						}
					break;
				}
			}
		}
	}

	if(empty($this->_errors)){
		$this->_passed = true;
	}

	return $this;
}

private function addError($error){
	$this->_errors[] = $error;
	}

public function errors(){
	return $this->_errors;
	}

	public function passed(){
		return $this->_passed;
	}
}

[cluelessPHP]

user

<?php
    class User {
        private $_db,
                $_data,
                $_sessionName,
                $_cookieName,
                $_isLoggedIn;

    public function __construct($user = null) {
        $this->_db = DB::getInstance();

        $this->_sessionName = Config::get('session/session_name');
        $this->_cookieName = Config::get('remember/cookie_name');

        if(!$user) {
            if(Session::exists($this->_sessionName)) {
                $user = Session::get($this->_sessionName);

                if($this->find($user)) {
                    $this->_isLoggedIn = true;
                } else {
						$this->logout();
                }
            }
        } else {
            $this->find($user);
        }
    }

    public function update ($fields = array(), $id = null) {
        if(!$id && $this->isLoggedIn()) {
            $id = $this->data()->id;
        }

        if(!$this->_db->update('users', $id, $fields)) {
            throw new Exception('There was a problem updating');
        }
    }

    public function create($fields) {
        if(!$this->_db->insert('users', $fields)) {
            throw new Exception('There was a problem creating an account');
        }
    }
    public function find($user = null) {
        if($user) {
            $field = (is_numeric($user)) ? 'id' : 'username';
            $data = $this->_db->get('users', array($field, '=', $user));

            if($data->count()) {
                $this->_data = $data->first();
                return true;
            }
        }
        return false;
    }

    public function login($username = null, $password = null, $remember = false) {

        if(!$username && !$password && $this->exists()) {
            Session::put($this->_sessionName, $this->data()->id);
        } else {
            $user = $this->find($username);

            if($user) {
                if($this->data()->password === Hash::make($password, $this->data()->salt)) {
                    Session::put($this->_sessionName, $this->data()->id);

                    if($remember) {
                        $hash = Hash::unique();
                        $hashCheck = $this->_db->get('users_session', array('user_id', '=', $this->data()->id));

                        if(!$hashCheck->count()) {
                            $this->_db->insert('users_session', array(
                                'user_id' => $this->data()->id,
                                'hash' => $hash
                            ));
                        } else {
                            $hash = $hashCheck->first()->hash;
                        }

                        Cookie::put($this->_cookieName, $hash, Config::get('remember/cookie_expiry'));
                    }

                return true;
                }
            }
        }
        return false;
    }

    public function hasPermission($key) {
        $group = $this->_db->get('groups', array('id', '=', $this->data()->group));

        if($group->count()) {
            $permissions = json_decode($group->first()->permissions, true);

            if($permissions[$key] == true) {
                return true;
            }
        }
        return false;
    }

    public function exists() {
        return (!empty($this->_data)) ? true : false;
    }

    public function logout() {
        $this->_db->delete('users_session', array('user_id', '=', $this->data()->id));
        Session::delete($this->_sessionName);
        Cookie::delete($this->_cookieName);
    }

    public function data() {
        return $this->_data;
    }

    public function isLoggedIn() {
        return $this->_isLoggedIn;
    }
}
?>

[cluelessPHP]

token

<?php

class Token {
	public static function generate(){
		return session::put(Config::get('session/token_name'), md5(uniqid()));
	}	

public static function check($token){
	$tokenName = Config::get('session/token_name');

	if(Session::exists($tokenName) && $token === Session::get($tokenName)){
		Session::delete($tokenName);
		return true;
	}
return false;
}
}

session

<?php

class Session {
    public static function exists($name){
        return(isset($_SESSION[$name])) ? true : false;
    }
    public static function put($name, $value){
        return $_SESSION[$name] = $value;
    }

public static function get($name){
    return $_SESSION[$name];
}
public static function delete($name){
    if(self::exists($name)){
        unset($_SESSION[$name]);
    }
}

public static function flash($name, $string =''){
    if(self::exists($name)){
        $session = self::get($name);
        self::delete($name);
        return $session;
    } else {
        self::put($name, $string);
    }
}
}

[cluelessPHP]

database

-- phpMyAdmin SQL Dump
-- version 4.2.0
-- http://www.phpmyadmin.net
--
-- Host: 127.0.0.1
-- Generation Time: Jan 02, 2015 at 01:13 AM
-- Server version: 5.6.15-log
-- PHP Version: 5.5.8

SET SQL_MODE = "NO_AUTO_VALUE_ON_ZERO";
SET time_zone = "+00:00";


/*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;
/*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;
/*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;
/*!40101 SET NAMES utf8 */;

--
-- Database: `oopdatabase`
--

-- --------------------------------------------------------

--
-- Table structure for table `groups`
--

CREATE TABLE IF NOT EXISTS `groups` (
`id` int(11) NOT NULL,
  `name` varchar(20) NOT NULL,
  `permissions` text NOT NULL
) ENGINE=InnoDB  DEFAULT CHARSET=latin1 AUTO_INCREMENT=3 ;

--
-- Dumping data for table `groups`
--

INSERT INTO `groups` (`id`, `name`, `permissions`) VALUES
(1, 'Standard', ''),
(2, 'Administrator ', '{"admin": 1}');

-- --------------------------------------------------------

--
-- Table structure for table `users`
--

CREATE TABLE IF NOT EXISTS `users` (
`id` int(11) NOT NULL,
  `username` varchar(20) NOT NULL,
  `password` varchar(64) NOT NULL,
  `salt` varchar(32) NOT NULL,
  `name` varchar(50) NOT NULL,
  `joined` datetime NOT NULL,
  `group` int(11) NOT NULL
) ENGINE=InnoDB  DEFAULT CHARSET=latin1 AUTO_INCREMENT=39 ;

--
-- Dumping data for table `users`
--

INSERT INTO `users` (`id`, `username`, `password`, `salt`, `name`, `joined`, `group`) VALUES
(38, 'kevin', 'ad8977ef959f06b2335dd7b3f983d33d0f4c71cfe5bda9a4046bec0840a37f73', 'RÜÂ+TzaÍ_ ''À‰HH}oÑ-¥ÃÆ·+*û’œ', 'kevin', '2015-01-02 00:56:16', 1);

-- --------------------------------------------------------

--
-- Table structure for table `users_sessions`
--

CREATE TABLE IF NOT EXISTS `users_sessions` (
`id` int(11) NOT NULL,
  `user_id` int(11) NOT NULL,
  `hash` varchar(50) NOT NULL
) ENGINE=InnoDB DEFAULT CHARSET=latin1 AUTO_INCREMENT=1 ;

--
-- Indexes for dumped tables
--

--
-- Indexes for table `groups`
--
ALTER TABLE `groups`
 ADD PRIMARY KEY (`id`);

--
-- Indexes for table `users`
--
ALTER TABLE `users`
 ADD PRIMARY KEY (`id`);

--
-- Indexes for table `users_sessions`
--
ALTER TABLE `users_sessions`
 ADD PRIMARY KEY (`id`);

--
-- AUTO_INCREMENT for dumped tables
--

--
-- AUTO_INCREMENT for table `groups`
--
ALTER TABLE `groups`
MODIFY `id` int(11) NOT NULL AUTO_INCREMENT,AUTO_INCREMENT=3;
--
-- AUTO_INCREMENT for table `users`
--
ALTER TABLE `users`
MODIFY `id` int(11) NOT NULL AUTO_INCREMENT,AUTO_INCREMENT=39;
--
-- AUTO_INCREMENT for table `users_sessions`
--
ALTER TABLE `users_sessions`
MODIFY `id` int(11) NOT NULL AUTO_INCREMENT;
/*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;
/*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;
/*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;

[cluelessPHP]

That's it all :p

Views? comments?