├── app
    ├── .htaccess
    ├── frontend
    │   ├── includes
    │   │   ├── errors
    │   │   │   └── 404.php
    │   │   ├── footer.php
    │   │   ├── messages.php
    │   │   ├── navbar.php
    │   │   └── header.php
    │   ├── assets
    │   │   ├── css
    │   │   │   ├── profile.css
    │   │   │   └── login-form.css
    │   │   └── js
    │   │   │   ├── login-form.js
    │   │   │   └── profile.js
    │   └── pages
    │   │   ├── login.php
    │   │   ├── register.php
    │   │   ├── update-account.php
    │   │   ├── profile.php
    │   │   └── home.php
    ├── backend
    │   ├── auth
    │   │   ├── user.php
    │   │   ├── logout.php
    │   │   ├── delete-account.php
    │   │   ├── profile.php
    │   │   ├── cookie.php
    │   │   ├── config.php
    │   │   ├── login.php
    │   │   ├── register.php
    │   │   └── update-account.php
    │   ├── core
    │   │   ├── Init.php
    │   │   ├── Hash.php
    │   │   ├── Config.php
    │   │   ├── Redirect.php
    │   │   ├── Cookie.php
    │   │   ├── Helpers.php
    │   │   ├── Password.php
    │   │   ├── Input.php
    │   │   ├── Session.php
    │   │   └── Database.php
    │   └── classes
    │   │   ├── Token.php
    │   │   ├── Validation.php
    │   │   └── User.php
    └── setup
    │   └── php_boilerplate.sql
├── logout.php
├── delete-account.php
├── test.php
├── login.php
├── index.php
├── profile.php
├── register.php
├── update-account.php
├── start.php
└── README.md


/app/.htaccess:
--------------------------------------------------------------------------------
1 | Options --Indexes
2 | 
3 | 


--------------------------------------------------------------------------------
/app/frontend/includes/errors/404.php:
--------------------------------------------------------------------------------
1 | Oops, That Page Cannot be Found!
2 | 


--------------------------------------------------------------------------------
/logout.php:
--------------------------------------------------------------------------------
1 | <?php require_once 'start.php'; ?>
2 | <?php require_once BACKEND_AUTH  . 'logout.php'; ?>
3 | 


--------------------------------------------------------------------------------
/app/backend/auth/user.php:
--------------------------------------------------------------------------------
1 | <?php
2 | require_once 'app/backend/core/Init.php';
3 | 
4 | $user = new User();
5 | 


--------------------------------------------------------------------------------
/delete-account.php:
--------------------------------------------------------------------------------
1 | <?php require_once 'start.php'; ?>
2 | <?php require_once BACKEND_AUTH  . 'delete-account.php'; ?>
3 | 


--------------------------------------------------------------------------------
/app/backend/auth/logout.php:
--------------------------------------------------------------------------------
1 | <?php
2 | require_once 'app/backend/core/Init.php';
3 | 
4 | $user->logout();
5 | 
6 | Redirect::to('index.php');
7 | 


--------------------------------------------------------------------------------
/app/backend/auth/delete-account.php:
--------------------------------------------------------------------------------
1 | <?php
2 | require_once 'app/backend/core/Init.php';
3 | 
4 | $user->deleteMe();
5 | 
6 | Redirect::to('index.php');
7 | 


--------------------------------------------------------------------------------
/app/frontend/includes/footer.php:
--------------------------------------------------------------------------------
1 | 
2 | <div class="jumbotron text-center" style="margin-bottom:0">
3 |   <p>Footer</p>
4 | </div>
5 | 
6 | </body>
7 | </html>
8 | 


--------------------------------------------------------------------------------
/app/backend/auth/profile.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | require_once 'app/backend/core/Init.php';
 3 | 
 4 | if (! $user->isLoggedIn())
 5 | {
 6 |      Redirect::to('index.php');
 7 | }
 8 | 
 9 | $data = $user->data();
10 | 
11 | 
12 | 


--------------------------------------------------------------------------------
/test.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | require_once 'start.php';
 3 | 
 4 | // $string = 'stringstringstring';
 5 | 
 6 | // echo Password::hash($string);
 7 | 
 8 | // echo Hash::make($string);
 9 | 
10 | // echo Token::generate();
11 | 


--------------------------------------------------------------------------------
/login.php:
--------------------------------------------------------------------------------
1 | <?php require_once 'start.php'; ?>
2 | <?php require_once FRONTEND_INCLUDE . 'header.php'; ?>
3 | <?php require_once FRONTEND_INCLUDE . 'navbar.php'; ?>
4 | <?php require_once BACKEND_AUTH . 'login.php'; ?>
5 | <?php require_once FRONTEND_PAGE . 'login.php'; ?>
6 | <?php require_once FRONTEND_INCLUDE . 'footer.php'; ?>
7 | 


--------------------------------------------------------------------------------
/index.php:
--------------------------------------------------------------------------------
1 | <?php require_once 'start.php'; ?>
2 | <?php require_once FRONTEND_INCLUDE . 'header.php'; ?>
3 | <?php require_once FRONTEND_INCLUDE . 'navbar.php'; ?>
4 | <?php require_once FRONTEND_INCLUDE . 'messages.php'; ?>
5 | <?php require_once FRONTEND_PAGE . 'home.php'; ?>
6 | <?php require_once FRONTEND_INCLUDE . 'footer.php'; ?>
7 | 


--------------------------------------------------------------------------------
/profile.php:
--------------------------------------------------------------------------------
1 | <?php require_once 'start.php'; ?>
2 | <?php require_once FRONTEND_INCLUDE . 'header.php'; ?>
3 | <?php require_once FRONTEND_INCLUDE . 'navbar.php'; ?>
4 | <?php require_once BACKEND_AUTH  . 'profile.php'; ?>
5 | <?php require_once FRONTEND_PAGE . 'profile.php'; ?>
6 | <?php require_once FRONTEND_INCLUDE . 'footer.php'; ?>
7 | 


--------------------------------------------------------------------------------
/register.php:
--------------------------------------------------------------------------------
1 | <?php require_once 'start.php'; ?>
2 | <?php require_once FRONTEND_INCLUDE . 'header.php'; ?>
3 | <?php require_once FRONTEND_INCLUDE . 'navbar.php'; ?>
4 | <?php require_once BACKEND_AUTH  . 'register.php'; ?>
5 | <?php require_once FRONTEND_PAGE . 'register.php'; ?>
6 | <?php require_once FRONTEND_INCLUDE . 'footer.php'; ?>
7 | 


--------------------------------------------------------------------------------
/app/backend/core/Init.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | session_start();
 3 | 
 4 | require_once 'app/backend/auth/config.php';
 5 | require_once 'app/backend/core/Helpers.php';
 6 | 
 7 | spl_autoload_register("autoload");
 8 | 
 9 | require_once 'app/backend/auth/cookie.php';
10 | require_once 'app/backend/auth/user.php';
11 | 
12 | 
13 | 
14 | 
15 | 
16 | 
17 | 
18 | 


--------------------------------------------------------------------------------
/update-account.php:
--------------------------------------------------------------------------------
1 | <?php require_once 'start.php'; ?>
2 | <?php require_once FRONTEND_INCLUDE . 'header.php'; ?>
3 | <?php require_once FRONTEND_INCLUDE . 'navbar.php'; ?>
4 | <?php require_once BACKEND_AUTH  . 'update-account.php'; ?>
5 | <?php require_once FRONTEND_PAGE . 'update-account.php'; ?>
6 | <?php require_once FRONTEND_INCLUDE . 'footer.php'; ?>
7 | 


--------------------------------------------------------------------------------
/start.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | require_once 'app/backend/core/Init.php';
 3 | 
 4 | define('BACKEND_AUTH',  'app/backend/auth/');
 5 | define('FRONTEND_BASE', 'app/frontend/');
 6 | define('FRONTEND_PAGE', 'app/frontend/pages/');
 7 | define('FRONTEND_INCLUDE', 'app/frontend/includes/');
 8 | define('FRONTEND_INCLUDE_ERROR', 'app/frontend/includes/errors/');
 9 | define('FRONTEND_ASSET', 'app/frontend/assets/');
10 | 


--------------------------------------------------------------------------------
/app/frontend/includes/messages.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if(Session::exists('register-success'))
 4 | {
 5 |   echo '<div class="alert alert-success"><strong></strong>' . Session::flash('register-success') . '<a href="login.php"> Login Here</a></div>';
 6 | }
 7 | 
 8 | if(Session::exists('update-success'))
 9 | {
10 |   echo '<div class="alert alert-success"><strong></strong>' . Session::flash('update-success') . '</div>';
11 | }
12 | 


--------------------------------------------------------------------------------
/app/backend/core/Hash.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class Hash
 4 | {
 5 |     public static function make($string)
 6 |     {
 7 |         return hash(Config::get('hash/algo_name'), $string . Hash::salt());
 8 |     }
 9 | 
10 |     public static function salt()
11 |     {
12 |         return mcrypt_create_iv(Config::get('hash/salt'));
13 |     }
14 | 
15 |     public static function unique()
16 |     {
17 |         return self::make(uniqid());
18 |     }
19 | }
20 | 


--------------------------------------------------------------------------------
/app/backend/auth/cookie.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | require_once 'app/backend/core/Init.php';
 3 | 
 4 | if(Cookie::exists(Config::get('remember/cookie_name')) && !Session::exists(Config::get('session/session_name')))
 5 | {
 6 |     $hash       = Cookie::get(Config::get('remember/cookie_name'));
 7 |     $hashCheck  = Database::getInstance()->get('users_session', array('hash', '=', $hash));
 8 | 
 9 |     if($hashCheck->count())
10 |     {
11 |         $user = new User($hashCheck->first()->user_id);
12 |         $user->login();
13 |     }
14 | }
15 | 


--------------------------------------------------------------------------------
/app/backend/classes/Token.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class Token
 4 | {
 5 |     public static function generate()
 6 |     {
 7 |         return Session::put(Config::get('session/token_name'), Hash::make(uniqid()));
 8 |     }
 9 | 
10 |     public static function check($token)
11 |     {
12 |         $tokenName = Config::get('session/token_name');
13 | 
14 |         if(Session::exists($tokenName) && $token === Session::get($tokenName))
15 |         {
16 |             return true;
17 |         }
18 | 
19 |         return false;
20 |     }
21 | }
22 | 


--------------------------------------------------------------------------------
/app/backend/core/Config.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class Config
 4 | {
 5 |     public static function get($path = null)
 6 |     {
 7 |         if ($path)
 8 |         {
 9 |             $config = $GLOBALS['config'];
10 |             $path = explode('/', $path);
11 | 
12 |             foreach ($path as $bit)
13 |             {
14 |                 if (isset($config[$bit]))
15 |                 {
16 |                     $config = $config[$bit];
17 |                 }
18 |             }
19 | 
20 |             return $config;
21 |         }
22 | 
23 |         return false;
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/app/frontend/assets/css/profile.css:
--------------------------------------------------------------------------------
 1 | .user-row {
 2 |     margin-bottom: 14px;
 3 | }
 4 | 
 5 | .user-row:last-child {
 6 |     margin-bottom: 0;
 7 | }
 8 | 
 9 | .dropdown-user {
10 |     margin: 13px 0;
11 |     padding: 5px;
12 |     height: 100%;
13 | }
14 | 
15 | .dropdown-user:hover {
16 |     cursor: pointer;
17 | }
18 | 
19 | .table-user-information > tbody > tr {
20 |     border-top: 1px solid rgb(221, 221, 221);
21 | }
22 | 
23 | .table-user-information > tbody > tr:first-child {
24 |     border-top: 0;
25 | }
26 | 
27 | 
28 | .table-user-information > tbody > tr > td {
29 |     border-top: 0;
30 | }
31 | .toppad
32 | {margin-top:20px;
33 | }
34 | 


--------------------------------------------------------------------------------
/app/frontend/assets/js/login-form.js:
--------------------------------------------------------------------------------
 1 | $(function() {
 2 | 
 3 |     $('#login-form-link').click(function(e) {
 4 |         $("#login-form").delay(100).fadeIn(100);
 5 |         $("#register-form").fadeOut(100);
 6 |         $('#register-form-link').removeClass('active');
 7 |         $(this).addClass('active');
 8 |         e.preventDefault();
 9 |     });
10 |     $('#register-form-link').click(function(e) {
11 |         $("#register-form").delay(100).fadeIn(100);
12 |         $("#login-form").fadeOut(100);
13 |         $('#login-form-link').removeClass('active');
14 |         $(this).addClass('active');
15 |         e.preventDefault();
16 |     });
17 | 
18 | });
19 | 


--------------------------------------------------------------------------------
/app/backend/core/Redirect.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class Redirect
 4 | {
 5 |     public static function to($location = null)
 6 |     {
 7 |         if($location)
 8 |         {
 9 |             if(is_numeric($location))
10 |             {
11 |                 switch ($location)
12 |                 {
13 |                     case 404:
14 |                         header('HTTP/1.0 404 Not Found');
15 |                         include FRONTEND_INCLUDE_ERROR . '404.php';
16 |                         exit();
17 |                     break;
18 |                 }
19 |             }
20 | 
21 |             header('Location: '.$location);
22 |             exit();
23 |         }
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/app/backend/core/Cookie.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class Cookie
 4 | {
 5 |     public static function exists($name)
 6 |     {
 7 |         return (isset($_COOKIE[$name])) ? true : false;
 8 |     }
 9 | 
10 |     public static function get($name)
11 |     {
12 |         return $_COOKIE[$name];
13 |     }
14 | 
15 |     public static function put($name, $value, $expiry)
16 |     {
17 |         if(setcookie($name, $value, time() + $expiry, '/'))
18 |         {
19 | 
20 |             return true;
21 |         }
22 | 
23 |         return false;
24 |     }
25 | 
26 |     public static function delete($name)
27 |     {
28 |         unset($_COOKIE[$name]);
29 |         setcookie($name, '', time() -3600, '/');
30 |     }
31 | }
32 | 


--------------------------------------------------------------------------------
/app/backend/core/Helpers.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function escape($string)
 4 | {
 5 |     return htmlentities($string, ENT_QUOTES, 'UTF-8');
 6 | }
 7 | 
 8 | function autoload($class_name)
 9 | {
10 |     if (is_file('app/backend/core/' . $class_name . '.php'))
11 |     {
12 |         require_once 'app/backend/core/' . $class_name . '.php';
13 |     }
14 |     else if
15 |     (is_file('app/backend/classes/' . $class_name . '.php'))
16 |     {
17 |         require_once 'app/backend/classes/' . $class_name . '.php';
18 |     }
19 | }
20 | 
21 | function cleaner($string)
22 | {
23 |     return ucfirst(preg_replace('/_/', ' ', $string));
24 | }
25 | 
26 | function appName()
27 | {
28 |     echo Config::get('app/name');
29 | }
30 | 
31 | 
32 | 


--------------------------------------------------------------------------------
/app/backend/core/Password.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class Password
 4 | {
 5 |     public static function hash($password)
 6 |     {
 7 |        return password_hash($password, Config::get('password/algo_name'),
 8 |             array(
 9 |                 'cost' => Config::get('password/cost'),
10 |                 'salt' => Hash::salt()
11 |             ));
12 |     }
13 | 
14 |     public static function rehash($hash)
15 |     {
16 |         return password_rehash($hash, Config::get('password/algo_name'), Config::get('password/cost'));
17 |     }
18 | 
19 |     public static function check($password, $hash)
20 |     {
21 |         return password_verify($password, $hash);
22 |     }
23 | 
24 |     public static function getInfo($hash)
25 |     {
26 |         return password_get_info($hash);
27 |     }
28 | 
29 | }
30 | 


--------------------------------------------------------------------------------
/app/backend/core/Input.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class Input
 4 | {
 5 |     public static function exists($type = 'POST')
 6 |     {
 7 |         switch ($type)
 8 |         {
 9 |             case 'POST':
10 |                 return (!empty($_POST)) ? true : false;
11 |                 break;
12 | 
13 |             case 'get':
14 |                 return (!empty($_GET)) ? true : false;
15 |                 break;
16 | 
17 |             default:
18 |                 return false;
19 |                 break;
20 |         }
21 |     }
22 | 
23 |     public static function get($item)
24 |     {
25 |         if(isset($_POST[$item]))
26 |         {
27 |             return $_POST[$item];
28 |         }
29 |         elseif (isset($_GET[$item]))
30 |         {
31 |             return $_GET[$item];
32 |         }
33 |         return '';
34 |     }
35 | }
36 | 


--------------------------------------------------------------------------------
/app/backend/auth/config.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $GLOBALS['config'] = array(
 4 | 
 5 |     'app' => array(
 6 |         'name'          => 'AppName',
 7 |     ),
 8 | 
 9 |     'mysql' => array(
10 |         'host'          => '127.0.0.1',
11 |         'username'      => 'root',
12 |         'password'      => '',
13 |         'db_name'        => 'php_boilerplate'
14 |     ),
15 | 
16 |     'password' => array(
17 |         'algo_name' => PASSWORD_DEFAULT,
18 |         'cost'      => 10,
19 |         'salt'      => 50,
20 |     ),
21 | 
22 |     'hash' => array(
23 |         'algo_name' => 'sha512',
24 |         'salt'      => 30,
25 |     ),
26 | 
27 |     'remember'  => array(
28 |         'cookie_name'   => 'token',
29 |         'cookie_expiry' => 604800
30 |     ),
31 | 
32 |     'session'   => array(
33 |         'session_name'  => 'user',
34 |         'token_name'    => 'csrf_token'
35 |     ),
36 | );
37 | 


--------------------------------------------------------------------------------
/app/frontend/pages/login.php:
--------------------------------------------------------------------------------
 1 | 
 2 | <div class="container" style="padding-top: 1%; padding-bottom: 5%;">
 3 | <h2>Login Form</h2>
 4 |   <form action="" method="post">
 5 |     <div class="form-group">
 6 |       <label for="username">Username:</label>
 7 |       <input type="text" class="form-control" id="username" placeholder="Enter Username" name="username">
 8 |     </div>
 9 |     <div class="form-group">
10 |       <label for="pwd">Password:</label>
11 |       <input type="password" class="form-control" id="password" placeholder="Enter password" name="password">
12 |     </div>
13 |     <div class="form-group form-check">
14 |     <label for="remember">
15 |       <input type="checkbox" name="remember" id="remember">Remember Me
16 |     </label>
17 |     </div>
18 |      <input type="hidden" name="csrf_token" value="<?php echo Token::generate(); ?>">
19 |      <input type="submit" value="Log In">
20 |   </form>
21 | </div>
22 | 


--------------------------------------------------------------------------------
/app/backend/core/Session.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class Session
 4 | {
 5 | 
 6 |     public static function exists($name)
 7 |     {
 8 |         return (isset($_SESSION[$name])) ? true : false;
 9 |     }
10 | 
11 |     public static function put($name, $value)
12 |     {
13 |         return $_SESSION[$name] = $value;
14 |     }
15 | 
16 |     public function get($name)
17 |     {
18 |         return $_SESSION[$name];
19 |     }
20 | 
21 |     public function delete($name)
22 |     {
23 |         if(self::exists($name))
24 |         {
25 |             unset($_SESSION[$name]);
26 |         }
27 |     }
28 | 
29 |     public static function flash($name, $string = '')
30 |     {
31 |         if(self::exists($name))
32 |         {
33 |             $session = self::get($name);
34 |             self::delete($name);
35 |             return $session;
36 |         }
37 |         else
38 |         {
39 |             self::put($name, $string);
40 |         }
41 |     }
42 | }
43 | 


--------------------------------------------------------------------------------
/app/frontend/assets/js/profile.js:
--------------------------------------------------------------------------------
 1 | $(document).ready(function() {
 2 |     var panels = $('.user-infos');
 3 |     var panelsButton = $('.dropdown-user');
 4 |     panels.hide();
 5 | 
 6 |     //Click dropdown
 7 |     panelsButton.click(function() {
 8 |         //get data-for attribute
 9 |         var dataFor = $(this).attr('data-for');
10 |         var idFor = $(dataFor);
11 | 
12 |         //current button
13 |         var currentButton = $(this);
14 |         idFor.slideToggle(400, function() {
15 |             //Completed slidetoggle
16 |             if(idFor.is(':visible'))
17 |             {
18 |                 currentButton.html('<i class="glyphicon glyphicon-chevron-up text-muted"></i>');
19 |             }
20 |             else
21 |             {
22 |                 currentButton.html('<i class="glyphicon glyphicon-chevron-down text-muted"></i>');
23 |             }
24 |         })
25 |     });
26 | 
27 | 
28 |     $('[data-toggle="tooltip"]').tooltip();
29 | 
30 |     $('button').click(function(e) {
31 |         e.preventDefault();
32 |         alert("This is a demo.\n :-)");
33 |     });
34 | });
35 | 


--------------------------------------------------------------------------------
/app/frontend/pages/register.php:
--------------------------------------------------------------------------------
 1 | 
 2 | <div class="container" style="padding-top: 5%; padding-bottom: 5%;">
 3 | <h2>Register Form</h2>
 4 |   <form action="" method="post">
 5 |     <div class="form-group">
 6 |       <label for="name">Name :</label>
 7 |       <input type="text" class="form-control" id="name" placeholder="Enter name" name="name" value="<?php echo escape(Input::get('name')); ?>">
 8 |     </div>
 9 |     <div class="form-group">
10 |       <label for="username">Username :</label>
11 |       <input type="text" class="form-control" id="username" placeholder="Enter username" name="username" value="<?php echo escape(Input::get('username')); ?>">
12 |     </div>
13 |     <div class="form-group">
14 |       <label for="password">Password :</label>
15 |       <input type="password" class="form-control" id="password" placeholder="Enter password" name="password">
16 |     </div>
17 |     <div class="form-group">
18 |       <label for="password_again">Confirm Password :</label>
19 |       <input type="password" class="form-control" id="password_again" placeholder="Confirm your password" name="password_again">
20 |     </div>
21 |     <input type="hidden" name="csrf_token" value="<?php echo Token::generate(); ?>">
22 |     <input type="submit" value="Register me">
23 |   </form>
24 | </div>
25 | 


--------------------------------------------------------------------------------
/app/frontend/includes/navbar.php:
--------------------------------------------------------------------------------
 1 | 
 2 | <nav class="navbar navbar-expand-sm bg-dark navbar-dark">
 3 |   <a class="navbar-brand" href="index.php">App Name</a>
 4 |   <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#collapsibleNavbar">
 5 |     <span class="navbar-toggler-icon"></span>
 6 |   </button>
 7 |   <div class="collapse navbar-collapse" id="collapsibleNavbar">
 8 |     <ul class="navbar-nav">
 9 |       <li class="nav-item">
10 |         <a class="nav-link" href="index.php">Home</a>
11 |       </li>
12 |       <li class="nav-item">
13 |         <a class="nav-link" href="#">About</a>
14 |       </li>
15 |       <li class="nav-item">
16 |         <a class="nav-link" href="#">Services</a>
17 |       </li>
18 |     </ul>
19 |     <?php if ($user->isLoggedIn()): ?>
20 |       <p>>Hello,  <?php echo $user->data()->name;?></p>
21 |     <ul class="nav navbar-nav nav-item navbar-right">
22 |       <li><a href="profile.php"><span class="glyphicon glyphicon-user"></span> Profile</a></li>
23 |       <li><a href="logout.php"><span class="glyphicon glyphicon-log-out"></span> Logout</a></li>
24 |     </ul>
25 |     <?php else: ?>
26 |     <ul class="nav navbar-nav nav-item navbar-right">
27 |       <li><a href="register.php"><span class="glyphicon glyphicon-user"></span>Register</a></li>
28 |       <li><a href="login.php"><span class="glyphicon glyphicon-log-in"></span>Log-in</a></li>
29 |     </ul>
30 |   <?php endif; ?>
31 |   </div>
32 | </nav>
33 | 


--------------------------------------------------------------------------------
/app/backend/auth/login.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | require_once 'app/backend/core/Init.php';
 3 | 
 4 | if (Input::exists())
 5 |     {
 6 |         if (Token::check(Input::get('csrf_token')))
 7 |         {
 8 |             $validate   = new Validation();
 9 | 
10 |             $validation = $validate->check($_POST, array(
11 |                 'username'  => array(
12 |                     'required'  => true,
13 |                     ),
14 | 
15 |                 'password'  => array(
16 |                     'required'  => true
17 |                     ),
18 |             ));
19 | 
20 |             if ($validation->passed())
21 |             {
22 |                 $remember   = (Input::get('remember') === 'on') ? true : false;
23 |                 $login      = $user->login(Input::get('username'), Input::get('password'), $remember);
24 | 
25 |                 if ($login)
26 |                 {
27 |                     Redirect::to('index.php');
28 |                 }
29 |                 else
30 |                 {
31 |                     echo '<div class="alert alert-danger"><strong></strong>Incorrect Credentials! Please try again...</div>';
32 |                 }
33 |             }
34 |             else
35 |             {
36 |                 foreach ($validation->errors() as $error)
37 |                 {
38 |                     echo '<div class="alert alert-danger"><strong></strong>' . cleaner($error) . '</div>';
39 |                 }
40 |             }
41 |         }
42 |     }
43 | 


--------------------------------------------------------------------------------
/app/frontend/includes/header.php:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 | <head>
 4 |   <title><?php appName(); ?></title>
 5 |   <meta charset="utf-8">
 6 |   <meta name="viewport" content="width=device-width, initial-scale=1">
 7 |   <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.1.0/css/bootstrap.min.css">
 8 |   <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
 9 |   <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js"></script>
10 |   <script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js"></script>
11 | 
12 |   <!-- For Profile Assets -->
13 |   <link href="//netdna.bootstrapcdn.com/bootstrap/3.1.0/css/bootstrap.min.css" rel="stylesheet" id="bootstrap-css">
14 |   <script src="//netdna.bootstrapcdn.com/bootstrap/3.1.0/js/bootstrap.min.js"></script>
15 |   <script src="//code.jquery.com/jquery-1.11.1.min.js"></script>
16 | 
17 |   <!-- Custom Assets -->
18 |   <link href="<?php echo FRONTEND_ASSET . 'css/profile.css'; ?>">
19 |   <script src="<?php echo FRONTEND_ASSET . 'css/profile.js'; ?>"></script>
20 | 
21 |   <style>
22 |   .fakeimg {
23 |       height: 200px;
24 |       background: #aaa;
25 |   }
26 |   </style>
27 | </head>
28 | <body>
29 | 
30 | <div class="jumbotron text-center" style="margin-bottom:0">
31 |   <h1>My First <?php appName(); ?></h1>
32 |   <p>Resize this responsive page to see the effect!</p>
33 |   <?php if ($user->isLoggedIn()): ?>
34 |     <h3 align="right">Hello,  <?php echo $user->data()->name;?></h3>
35 |    <?php endif; ?>
36 | </div>
37 | 
38 | 


--------------------------------------------------------------------------------
/app/frontend/pages/update-account.php:
--------------------------------------------------------------------------------
 1 | 
 2 | <div class="container" style="padding-top: 5%; padding-bottom: 5%;">
 3 | <h2>Update Information</h2>
 4 |   <form action="" method="post">
 5 |     <div class="form-group">
 6 |       <label for="name">Name :</label>
 7 |       <input type="text" class="form-control" id="name" placeholder="Enter name" name="name" value="<?php echo escape($user->data()->name); ?>">
 8 |     </div>
 9 |     <div class="form-group">
10 |       <label for="username">Username :</label>
11 |       <input type="text" class="form-control" id="username" placeholder="Enter username" name="username" value="<?php echo escape($user->data()->username); ?>">
12 |     </div>
13 |     <div class="form-group">
14 |       <label for="current_password">Current Password :</label>
15 |       <input type="password" class="form-control" id="current_password" placeholder="Enter current password" name="current_password">
16 |     </div>
17 |     <div class="form-group">
18 |       <label for="new_password">New Password :</label>
19 |       <input type="password" class="form-control" id="new_password" placeholder="Enter new_password" name="new_password">
20 |     </div>
21 |     <div class="form-group">
22 |       <label for="confirm_new_password">Confirm Password :</label>
23 |       <input type="password" class="form-control" id="confirm_new_password" placeholder="Confirm your new password" name="confirm_new_password">
24 |     </div>
25 |     <input type="hidden" name="csrf_token" value="<?php echo Token::generate(); ?>">
26 |     <input type="submit" value="Update Profile">
27 |   </form>
28 | </div>
29 | 


--------------------------------------------------------------------------------
/app/frontend/pages/profile.php:
--------------------------------------------------------------------------------
 1 | 
 2 | <div class="container">
 3 |       <div class="row">
 4 |         <div class="col-xs-12 col-sm-12 col-md-6 col-lg-6 col-xs-offset-0 col-sm-offset-0 col-md-offset-3 col-lg-offset-3 toppad" >
 5 |           <div class="panel panel-info">
 6 |             <div class="panel-heading">
 7 |               <h3 class="panel-title"><?php echo escape($data->name); ?></h3>
 8 |             </div>
 9 |             <div class="panel-body">
10 |               <div class="row">
11 |                 <div class=" col-md-9 col-lg-9 ">
12 |                   <table class="table table-user-information">
13 |                     <tbody>
14 |                       <tr>
15 |                         <td>Name :</td>
16 |                         <td><?php echo escape($data->name); ?></td>
17 |                       </tr>
18 |                       <tr>
19 |                         <td>Username :</td>
20 |                         <td><?php echo escape($data->username); ?></td>
21 |                       </tr>
22 |                       <tr>
23 |                         <td>Date Joined :</td>
24 |                         <td><?php echo escape($data->joined); ?></td>
25 |                       </tr>
26 |                     </tbody>
27 |                   </table>
28 |                   <a href="update-account.php" class="btn btn-primary">Update Information</a>
29 |                   <a href="index.php" class="btn btn-primary">Back</a>
30 |                   <a href="delete-account.php" class="btn btn-danger">Delete Account</a>
31 |                 </div>
32 |               </div>
33 |             </div>
34 |           </div>
35 |         </div>
36 |       </div>
37 |     </div>
38 | 


--------------------------------------------------------------------------------
/app/frontend/pages/home.php:
--------------------------------------------------------------------------------
 1 | 
 2 | <div class="container" style="margin-top:30px">
 3 |   <div class="row">
 4 |     <div class="col-sm-4">
 5 |       <h2>About Me</h2>
 6 |       <h5>Photo of me:</h5>
 7 |       <div class="fakeimg">Fake Image</div>
 8 |       <p>Some text about me in culpa qui officia deserunt mollit anim..</p>
 9 |       <h3>Some Links</h3>
10 |       <p>Lorem ipsum dolor sit ame.</p>
11 |       <ul class="nav nav-pills flex-column">
12 |         <li class="nav-item">
13 |           <a class="nav-link active" href="#">Active</a>
14 |         </li>
15 |         <li class="nav-item">
16 |           <a class="nav-link" href="#">Link</a>
17 |         </li>
18 |         <li class="nav-item">
19 |           <a class="nav-link" href="#">Link</a>
20 |         </li>
21 |         <li class="nav-item">
22 |           <a class="nav-link disabled" href="#">Disabled</a>
23 |         </li>
24 |       </ul>
25 |       <hr class="d-sm-none">
26 |     </div>
27 |     <div class="col-sm-8">
28 |       <h2>TITLE HEADING</h2>
29 |       <h5>Title description, Dec 7, 2017</h5>
30 |       <div class="fakeimg">Fake Image</div>
31 |       <p>Some text..</p>
32 |       <p>Sunt in culpa qui officia deserunt mollit anim id est laborum consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco.</p>
33 |       <br>
34 |       <h2>TITLE HEADING</h2>
35 |       <h5>Title description, Sep 2, 2017</h5>
36 |       <div class="fakeimg">Fake Image</div>
37 |       <p>Some text..</p>
38 |       <p>Sunt in culpa qui officia deserunt mollit anim id est laborum consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco.</p>
39 |     </div>
40 |   </div>
41 | </div>
42 | 


--------------------------------------------------------------------------------
/app/backend/auth/register.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | require_once 'app/backend/core/Init.php';
 3 | 
 4 | if(Input::exists())
 5 | {
 6 |     if(Token::check(Input::get('csrf_token')) )
 7 |     {
 8 |         $validate = new Validation();
 9 | 
10 |         $validation = $validate->check($_POST, array(
11 |             'name' => array(
12 |                 'required' => true,
13 |                 'min' => 2,
14 |                 'max' => 50
15 |             ),
16 | 
17 |             'username' => array(
18 |                 'required' => true,
19 |                 'min' => 2,
20 |                 'max' => 20,
21 |                 'unique' => 'users'
22 |             ),
23 | 
24 |             'password' => array(
25 |                 'required' => true,
26 |                 'min' => 6
27 |             ),
28 | 
29 |             'password_again' => array(
30 |                 'required' => true,
31 |                 'matches' => 'password'
32 |             )
33 |         ));
34 | 
35 |         if ($validate->passed())
36 |         {
37 |             try
38 |             {
39 |                 $user->create(array(
40 |                     'username'  => Input::get('username'),
41 |                     'password'  => Password::hash(Input::get('password')),
42 |                     'name'      => Input::get('name'),
43 |                     'joined'    => date('Y-m-d H:i:s'),
44 |                     'groups'    => 1
45 |                     ));
46 | 
47 |                 Session::flash('register-success', 'Thanks for registering! You can login now.');
48 |                 Redirect::to('index.php');
49 |             }
50 |             catch(Exception $e)
51 |             {
52 |                 die($e->getMessage());
53 |             }
54 |         }
55 |         else
56 |         {
57 |             foreach ($validate->errors() as $error)
58 |             {
59 |                 echo '<div class="alert alert-danger"><strong></strong>' . cleaner($error) . '</div>';
60 |             }
61 |         }
62 |     }
63 | }
64 | 


--------------------------------------------------------------------------------
/app/backend/auth/update-account.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | require_once 'app/backend/core/Init.php';
 3 | 
 4 | if (Input::exists())
 5 | {
 6 |     if (Token::check(Input::get('csrf_token')))
 7 |     {
 8 |         $validate = new Validation();
 9 | 
10 |         $validation = $validate->check($_POST, array(
11 |             'name'  => array(
12 |                 'required'  => true,
13 |                 'min'       => 2,
14 |                 'max'       => 50
15 |                 ),
16 |             'username'  => array(
17 |                 'required'  => true,
18 |                 'min'       => 2,
19 |                 'max'       => 20
20 |                 ),
21 |             'current_password'  => array(
22 |                 'required'  => true,
23 |                 'min'       => 6,
24 |                 'verify'     => 'password'
25 |                 ),
26 |             'new_password'  => array(
27 |                 'optional'  => true,
28 |                 'min'       => 6,
29 |                 'bind'      => 'confirm_new_password'
30 |                 ),
31 | 
32 |             'confirm_new_password' => array(
33 |                 'optional'  => true,
34 |                 'min'       => 6,
35 |                 'match'   => 'new_password',
36 |                 'bind' => 'new_password',
37 |                 ),
38 |             ));
39 | 
40 |         if ($validation->passed())
41 |         {
42 |              try
43 |                 {
44 |                     $user->update(array(
45 |                         'name'  => Input::get('name'),
46 |                         'username'  => Input::get('username'),
47 |                     ));
48 | 
49 |                      if ($validation->optional())
50 |                     {
51 |                         $user->update(array(
52 |                         'password'  => Password::hash(Input::get('new_password'))
53 |                         ));
54 |                     }
55 |                     Session::flash('update-success', 'Profile successfully updated!');
56 |                     Redirect::to('index.php');
57 |                 }
58 |              catch(Exception $e)
59 |                 {
60 |                     die($e->getMessage());
61 |                 }
62 |             }
63 | 
64 |         else
65 |         {
66 |             echo '<div class="alert alert-danger"><strong></strong>' . cleaner($validation->error()) . '</div>';
67 |         }
68 |     }
69 | }
70 | 


--------------------------------------------------------------------------------
/app/frontend/assets/css/login-form.css:
--------------------------------------------------------------------------------
  1 | body {
  2 |     padding-top: 90px;
  3 | }
  4 | .panel-login {
  5 |   border-color: #ccc;
  6 |   -webkit-box-shadow: 0px 2px 3px 0px rgba(0,0,0,0.2);
  7 |   -moz-box-shadow: 0px 2px 3px 0px rgba(0,0,0,0.2);
  8 |   box-shadow: 0px 2px 3px 0px rgba(0,0,0,0.2);
  9 | }
 10 | .panel-login>.panel-heading {
 11 |   color: #00415d;
 12 |   background-color: #fff;
 13 |   border-color: #fff;
 14 |   text-align:center;
 15 | }
 16 | .panel-login>.panel-heading a{
 17 |   text-decoration: none;
 18 |   color: #666;
 19 |   font-weight: bold;
 20 |   font-size: 15px;
 21 |   -webkit-transition: all 0.1s linear;
 22 |   -moz-transition: all 0.1s linear;
 23 |   transition: all 0.1s linear;
 24 | }
 25 | .panel-login>.panel-heading a.active{
 26 |   color: #029f5b;
 27 |   font-size: 18px;
 28 | }
 29 | .panel-login>.panel-heading hr{
 30 |   margin-top: 10px;
 31 |   margin-bottom: 0px;
 32 |   clear: both;
 33 |   border: 0;
 34 |   height: 1px;
 35 |   background-image: -webkit-linear-gradient(left,rgba(0, 0, 0, 0),rgba(0, 0, 0, 0.15),rgba(0, 0, 0, 0));
 36 |   background-image: -moz-linear-gradient(left,rgba(0,0,0,0),rgba(0,0,0,0.15),rgba(0,0,0,0));
 37 |   background-image: -ms-linear-gradient(left,rgba(0,0,0,0),rgba(0,0,0,0.15),rgba(0,0,0,0));
 38 |   background-image: -o-linear-gradient(left,rgba(0,0,0,0),rgba(0,0,0,0.15),rgba(0,0,0,0));
 39 | }
 40 | .panel-login input[type="text"],.panel-login input[type="email"],.panel-login input[type="password"] {
 41 |   height: 45px;
 42 |   border: 1px solid #ddd;
 43 |   font-size: 16px;
 44 |   -webkit-transition: all 0.1s linear;
 45 |   -moz-transition: all 0.1s linear;
 46 |   transition: all 0.1s linear;
 47 | }
 48 | .panel-login input:hover,
 49 | .panel-login input:focus {
 50 |   outline:none;
 51 |   -webkit-box-shadow: none;
 52 |   -moz-box-shadow: none;
 53 |   box-shadow: none;
 54 |   border-color: #ccc;
 55 | }
 56 | .btn-login {
 57 |   background-color: #59B2E0;
 58 |   outline: none;
 59 |   color: #fff;
 60 |   font-size: 14px;
 61 |   height: auto;
 62 |   font-weight: normal;
 63 |   padding: 14px 0;
 64 |   text-transform: uppercase;
 65 |   border-color: #59B2E6;
 66 | }
 67 | .btn-login:hover,
 68 | .btn-login:focus {
 69 |   color: #fff;
 70 |   background-color: #53A3CD;
 71 |   border-color: #53A3CD;
 72 | }
 73 | .forgot-password {
 74 |   text-decoration: underline;
 75 |   color: #888;
 76 | }
 77 | .forgot-password:hover,
 78 | .forgot-password:focus {
 79 |   text-decoration: underline;
 80 |   color: #666;
 81 | }
 82 | 
 83 | .btn-register {
 84 |   background-color: #1CB94E;
 85 |   outline: none;
 86 |   color: #fff;
 87 |   font-size: 14px;
 88 |   height: auto;
 89 |   font-weight: normal;
 90 |   padding: 14px 0;
 91 |   text-transform: uppercase;
 92 |   border-color: #1CB94A;
 93 | }
 94 | .btn-register:hover,
 95 | .btn-register:focus {
 96 |   color: #fff;
 97 |   background-color: #1CA347;
 98 |   border-color: #1CA347;
 99 | }
100 | 


--------------------------------------------------------------------------------
/app/setup/php_boilerplate.sql:
--------------------------------------------------------------------------------
  1 | -- phpMyAdmin SQL Dump
  2 | -- version 4.7.4
  3 | -- https://www.phpmyadmin.net/
  4 | --
  5 | -- Host: 127.0.0.1
  6 | -- Generation Time: Aug 02, 2018 at 12:52 PM
  7 | -- Server version: 10.1.28-MariaDB
  8 | -- PHP Version: 7.1.10
  9 | 
 10 | SET SQL_MODE = "NO_AUTO_VALUE_ON_ZERO";
 11 | SET AUTOCOMMIT = 0;
 12 | START TRANSACTION;
 13 | SET time_zone = "+00:00";
 14 | 
 15 | 
 16 | /*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;
 17 | /*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;
 18 | /*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;
 19 | /*!40101 SET NAMES utf8mb4 */;
 20 | 
 21 | --
 22 | -- Database: `php_boilerplate`
 23 | --
 24 | 
 25 | -- --------------------------------------------------------
 26 | 
 27 | --
 28 | -- Table structure for table `groups`
 29 | --
 30 | 
 31 | CREATE TABLE `groups` (
 32 |   `gid` int(11) NOT NULL,
 33 |   `name` varchar(20) COLLATE utf8mb4_unicode_ci NOT NULL,
 34 |   `permissions` text COLLATE utf8mb4_unicode_ci NOT NULL
 35 | ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 36 | 
 37 | --
 38 | -- Dumping data for table `groups`
 39 | --
 40 | 
 41 | INSERT INTO `groups` (`gid`, `name`, `permissions`) VALUES
 42 | (1, 'Standard User', ''),
 43 | (2, 'Administrator', '{\"admin\": 1,\r\n\"moderator\" :1}');
 44 | 
 45 | -- --------------------------------------------------------
 46 | 
 47 | --
 48 | -- Table structure for table `users`
 49 | --
 50 | 
 51 | CREATE TABLE `users` (
 52 |   `uid` int(11) NOT NULL,
 53 |   `username` varchar(20) COLLATE utf8mb4_unicode_ci NOT NULL,
 54 |   `password` varchar(255) COLLATE utf8mb4_unicode_ci NOT NULL,
 55 |   `name` varchar(50) COLLATE utf8mb4_unicode_ci NOT NULL,
 56 |   `joined` datetime NOT NULL,
 57 |   `groups` int(11) NOT NULL
 58 | ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 59 | 
 60 | --
 61 | -- Table structure for table `users_session`
 62 | --
 63 | 
 64 | CREATE TABLE `users_session` (
 65 |   `id` int(11) NOT NULL,
 66 |   `user_id` int(11) NOT NULL,
 67 |   `hash` varchar(255) COLLATE utf8mb4_unicode_ci NOT NULL
 68 | ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 69 | 
 70 | --
 71 | -- Indexes for dumped tables
 72 | --
 73 | 
 74 | --
 75 | -- Indexes for table `groups`
 76 | --
 77 | ALTER TABLE `groups`
 78 |   ADD PRIMARY KEY (`gid`);
 79 | 
 80 | --
 81 | -- Indexes for table `users`
 82 | --
 83 | ALTER TABLE `users`
 84 |   ADD PRIMARY KEY (`uid`);
 85 | 
 86 | --
 87 | -- Indexes for table `users_session`
 88 | --
 89 | ALTER TABLE `users_session`
 90 |   ADD PRIMARY KEY (`id`);
 91 | 
 92 | --
 93 | -- AUTO_INCREMENT for dumped tables
 94 | --
 95 | 
 96 | --
 97 | -- AUTO_INCREMENT for table `groups`
 98 | --
 99 | ALTER TABLE `groups`
100 |   MODIFY `gid` int(11) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=3;
101 | 
102 | --
103 | -- AUTO_INCREMENT for table `users`
104 | --
105 | ALTER TABLE `users`
106 |   MODIFY `uid` int(11) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=20;
107 | 
108 | --
109 | -- AUTO_INCREMENT for table `users_session`
110 | --
111 | ALTER TABLE `users_session`
112 |   MODIFY `id` int(11) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=4;
113 | COMMIT;
114 | 
115 | /*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;
116 | /*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;
117 | /*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;
118 | 


--------------------------------------------------------------------------------
/app/backend/classes/Validation.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | class Validation
  4 | {
  5 |     private $_passed = false,
  6 |             $_optional = false,
  7 |             $_errors = array(),
  8 |             $_db     = null;
  9 | 
 10 |     public function __construct()
 11 |     {
 12 |         $this->_db = Database::getInstance();
 13 |         $this->_user = new User;
 14 |     }
 15 | 
 16 |     public function check($source, $items = array())
 17 |     {
 18 |         foreach ($items as $item => $rules)
 19 |         {
 20 |             foreach ($rules as $rule => $rule_value)
 21 |             {
 22 | 
 23 |                 $value = trim($source[$item]);
 24 |                 $item = escape($item);
 25 | 
 26 |                 if ($rule === 'optional' && ! empty($value))
 27 |                 {
 28 |                    $this->_optional = true;
 29 |                 }
 30 | 
 31 |                 if ($rule === 'required' && empty($value))
 32 |                 {
 33 |                     $this->addError("{$item} is required.");
 34 |                 }
 35 | 
 36 |                 if ($rule === 'bind' && empty($value) && ! empty($source[$rule_value]))
 37 |                 {
 38 |                     $this->addError("{$item} is required.");
 39 |                 }
 40 | 
 41 |                 else if (!empty($value))
 42 |                 {
 43 |                     switch ($rule)
 44 |                     {
 45 |                         case 'min':
 46 | 
 47 |                             if (strlen($value) < $rule_value)
 48 |                             {
 49 |                                 $this->addError("{$item} must be minimum of {$rule_value} character.");
 50 |                             }
 51 |                             break;
 52 | 
 53 |                         case 'max':
 54 | 
 55 |                             if (strlen($value) > $rule_value)
 56 |                             {
 57 |                                 $this->addError("{$item} must be maximum of {$rule_value} character.");
 58 |                             }
 59 |                             break;
 60 | 
 61 |                         case 'match':
 62 | 
 63 |                             if ($value != $source[$rule_value])
 64 |                             {
 65 |                                 $this->addError("{$rule_value} must match {$item}.");
 66 |                             }
 67 |                             break;
 68 | 
 69 |                         case 'email':
 70 | 
 71 |                             if (filter_var($value,FILTER_VALIDATE_EMAIL) !==  $rule_value)
 72 |                             {
 73 |                                 $this->addError("{$item} must valid email format.");
 74 |                             }
 75 |                             break;
 76 | 
 77 |                         case 'alnum':
 78 | 
 79 |                             if (ctype_alnum($value) !==  $rule_value)
 80 |                             {
 81 |                                 $this->addError("{$item} must alphanumeric.");
 82 |                             }
 83 |                             break;
 84 | 
 85 |                         case 'unique':
 86 |                             $check = $this->_db->get($rule_value, array($item, '=', $value));
 87 | 
 88 |                             if ($check->count())
 89 |                             {
 90 |                                 $this->addError("{$item} already exists.");
 91 |                             }
 92 |                             break;
 93 | 
 94 |                         case 'verify':
 95 |                             $check = $this->_db->get($rule_value, array($item, '=', $value));
 96 | 
 97 |                             if (! Password::check($value, $this->_user->data()->password))
 98 |                             {
 99 |                                 $this->addError("Wrong Current Password!.");
100 |                             }
101 |                             break;
102 |                     }
103 |                 }
104 |             }
105 |         }
106 | 
107 |         if (empty($this->_errors))
108 |         {
109 |             $this->_passed = true;
110 |         }
111 | 
112 |         return $this;
113 |     }
114 | 
115 |     private function addError($error)
116 |     {
117 |         $this->_errors[] = $error;
118 |     }
119 | 
120 |     public function errors()
121 |     {
122 |         return $this->_errors;
123 |     }
124 | 
125 |     public function error()
126 |     {
127 |         return $this->_errors[0];
128 |     }
129 | 
130 |     public function passed()
131 |     {
132 |         return $this->_passed;
133 |     }
134 | 
135 |     public function optional()
136 |     {
137 |         return $this->_optional;
138 |     }
139 | }
140 | 


--------------------------------------------------------------------------------
/app/backend/core/Database.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | class Database
  4 | {
  5 |     private static $_instance = null;
  6 |     private $_pdo,
  7 |             $_query,
  8 |             $_error = false,
  9 |             $_results,
 10 |             $_count = 0;
 11 | 
 12 |     private function __construct()
 13 |     {
 14 |         try
 15 |         {
 16 |         $this->_pdo = new PDO('mysql:host='.Config::get('mysql/host').';'.
 17 |                                 'dbname='.Config::get('mysql/db_name'),
 18 |                                 Config::get('mysql/username'),
 19 |                                 Config::get('mysql/password')
 20 |             );
 21 |         }
 22 |         catch(PDOException $e)
 23 |         {
 24 |             die($e->getMessage());
 25 |         }
 26 |     }
 27 | 
 28 |     public static function getInstance()
 29 |     {
 30 |         if (!isset(self::$_instance))
 31 |         {
 32 |             self::$_instance = new Database();
 33 |         }
 34 | 
 35 |         return self::$_instance;
 36 |     }
 37 | 
 38 |     public function query($sql, $params = array())
 39 |     {
 40 |         $this->_error = false;
 41 | 
 42 |         if ($this->_query = $this->_pdo->prepare($sql))
 43 |         {
 44 |             $x = 1;
 45 | 
 46 |             if (count($params))
 47 |             {
 48 |                 foreach ($params as $param)
 49 |                 {
 50 |                     $this->_query->bindvalue($x, $param);
 51 |                     $x++;
 52 |                 }
 53 |             }
 54 | 
 55 |             if ($this->_query->execute())
 56 |             {
 57 |                 $this->_results     = $this->_query->fetchAll(PDO::FETCH_OBJ);
 58 |                 $this->_count       = $this->_query->rowCount();
 59 |             }
 60 |             else
 61 |             {
 62 |                 $this->_error = true;
 63 |             }
 64 |         }
 65 | 
 66 |         return $this;
 67 |     }
 68 | 
 69 |     public function action($action, $table, $where = array())
 70 |     {
 71 |         if (count($where) === 3)
 72 |         {
 73 |             $operators  = array('=', '>', '<', '>=', '<=');
 74 | 
 75 |             $field      = $where[0];
 76 |             $operator   = $where[1];
 77 |             $value      = $where[2];
 78 | 
 79 |             if (in_array($operator, $operators))
 80 |             {
 81 |                 $sql = "{$action} FROM {$table} WHERE {$field} {$operator} ?";
 82 | 
 83 |                 if (!$this->query($sql, array($value))->error())
 84 |                 {
 85 |                     return $this;
 86 |                 }
 87 |             }
 88 |         }
 89 | 
 90 |         return false;
 91 |     }
 92 | 
 93 |     public function get($table, $where)
 94 |     {
 95 |         return $this->action('SELECT *', $table, $where);
 96 |     }
 97 | 
 98 |     public function delete($table, $where)
 99 |     {
100 |         return $this->action('DELETE', $table, $where);
101 |     }
102 | 
103 |     public function insert($table, $fields = array())
104 |     {
105 |         if (count($fields))
106 |         {
107 |             $keys   = array_keys($fields);
108 |             $values = '';
109 |             $x      = 1;
110 | 
111 |             foreach ($fields as $field)
112 |             {
113 |                 $values .= '?';
114 | 
115 |                 if ($x < count($fields))
116 |                 {
117 |                     $values .= ', ';
118 |                 }
119 | 
120 |                 $x++;
121 |             }
122 | 
123 |             $sql = "INSERT INTO {$table} (`".implode('`, `', $keys)."`) VALUES ({$values})";
124 | 
125 |             if (!$this->query($sql, $fields)->error())
126 |             {
127 |                 return true;
128 |             }
129 |         }
130 | 
131 |         return false;
132 |     }
133 | 
134 |     public function update($table, $id, $fields)
135 |     {
136 |         $set    = '';
137 |         $x      = 1;
138 | 
139 |         foreach ($fields as $name => $value)
140 |         {
141 |             $set .= "{$name} = ?";
142 | 
143 |             if ($x < count($fields))
144 |             {
145 |                 $set .= ', ';
146 |             }
147 | 
148 |             $x++;
149 |         }
150 | 
151 |         $sql = "UPDATE {$table} SET {$set} WHERE uid = {$id}";
152 | 
153 |         if (!$this->query($sql, $fields)->error())
154 |         {
155 |             return true;
156 |         }
157 | 
158 |         return false;
159 |     }
160 | 
161 |     public function results()
162 |     {
163 |         return $this->_results;
164 |     }
165 | 
166 |     public function first()
167 |     {
168 |         return $this->results()[0];
169 |     }
170 | 
171 |     public function error()
172 |     {
173 |         return $this->_error;
174 |     }
175 | 
176 |     public function count()
177 |     {
178 |         return $this->_count;
179 |     }
180 | }
181 | 


--------------------------------------------------------------------------------
/app/backend/classes/User.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | class User
  4 | {
  5 |     private $_db,
  6 |             $_data,
  7 |             $_sessionName,
  8 |             $_cookieName,
  9 |             $_isLoggedIn;
 10 | 
 11 |     public function __construct($user = null)
 12 |     {
 13 |         $this->_db = Database::getInstance();
 14 | 
 15 |         $this->_sessionName = Config::get('session/session_name');
 16 | 
 17 |         $this->_cookieName  = Config::get('remember/cookie_name');
 18 | 
 19 |         if (! $user)
 20 |         {
 21 |             if (Session::exists($this->_sessionName))
 22 |             {
 23 |                 $user = Session::get($this->_sessionName);
 24 | 
 25 |                 if ($this->find($user))
 26 |                 {
 27 |                     $this->_isLoggedIn = true;
 28 |                 }
 29 |             }
 30 | 
 31 |         }
 32 |         else
 33 |         {
 34 |             $this->find($user);
 35 |         }
 36 |     }
 37 | 
 38 |     public function update($fields = array(), $id = null)
 39 |     {
 40 |         if (!$id && $this->isLoggedIn())
 41 |         {
 42 |             $id = $this->data()->uid;
 43 |         }
 44 | 
 45 |         if (!$this->_db->update('users', $id, $fields))
 46 |         {
 47 |             throw new Exception('Unable to update the user.');
 48 |         }
 49 |     }
 50 | 
 51 |     public function create($fields = array())
 52 |     {
 53 |         if (!$this->_db->insert('users', $fields))
 54 |         {
 55 |             throw new Exception("Unable to create the user.");
 56 |         }
 57 |     }
 58 | 
 59 |     public function find($user = null)
 60 |     {
 61 |         if ($user)
 62 |         {
 63 |             $field  = (is_numeric($user)) ? 'uid' : 'username';
 64 | 
 65 |             $data = $this->_db->get('users', array($field, '=', $user));
 66 | 
 67 |             if ($data->count())
 68 |             {
 69 |                 $this->_data = $data->first();
 70 |                 return true;
 71 |             }
 72 |         }
 73 |     }
 74 | 
 75 |     public function login($username = null, $password = null, $remember = false)
 76 |     {
 77 |         if (! $username && ! $password && $this->exists())
 78 |         {
 79 |             Session::put($this->_sessionName, $this->data()->uid);
 80 |         }
 81 |         else
 82 |         {
 83 |             $user = $this->find($username);
 84 | 
 85 |             if ($user)
 86 |             {
 87 |                 if (Password::check($password, $this->data()->password))
 88 |                 {
 89 |                     Session::put($this->_sessionName, $this->data()->uid);
 90 | 
 91 |                     if ($remember)
 92 |                     {
 93 |                         $hash       = Hash::unique();
 94 |                         $hashCheck  = $this->_db->get('users_session', array('user_id', '=', $this->data()->uid));
 95 | 
 96 |                         if (!$hashCheck->count())
 97 |                         {
 98 |                             $this->_db->insert('users_session', array(
 99 |                                 'user_id'   => $this->data()->uid,
100 |                                 'hash'      => $hash
101 |                             ));
102 |                         }
103 |                         else
104 |                         {
105 |                             $hash = $hashCheck->first()->hash;
106 |                         }
107 | 
108 |                         Cookie::put($this->_cookieName, $hash, Config::get('remember/cookie_expiry'));
109 |                     }
110 | 
111 |                     return true;
112 |                 }
113 |             }
114 |         }
115 | 
116 |         return false;
117 |     }
118 | 
119 |     public function hasPermission($key)
120 |     {
121 |         $group = $this->_db->get('groups', array('gid', '=', $this->data()->groups));
122 | 
123 |         if  ($group->count())
124 |         {
125 |             $permissions = json_decode($group->first()->permissions, true);
126 | 
127 |             if ($permissions[$key] == true)
128 |             {
129 |                 return true;
130 |             }
131 |         }
132 | 
133 |         return false;
134 |     }
135 | 
136 |     public function exists()
137 |     {
138 |         return (!empty($this->_data)) ? true : false;
139 |     }
140 | 
141 |     public function logout()
142 |     {
143 |         $this->_db->delete('users_session', array('user_id', '=', $this->data()->uid));
144 | 
145 |         Session::delete($this->_sessionName);
146 |         Cookie::delete($this->_cookieName);
147 |     }
148 | 
149 |     public function data()
150 |     {
151 |         return $this->_data;
152 |     }
153 | 
154 |     public function isLoggedIn()
155 |     {
156 |         return $this->_isLoggedIn;
157 |     }
158 | 
159 |     public function deleteMe()
160 |     {
161 |         if ($this->isLoggedIn())
162 |         {
163 |             $id = $this->data()->uid;
164 |         }
165 | 
166 |         if (!$this->_db->delete('users', array('uid', '=', $id)))
167 |         {
168 |             throw new Exception('Unable to update the user.');
169 |         }
170 |     }
171 | }
172 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
  1 | # Simple PHP Boilerplate
  2 | - This project only exists for helping my colleagues in school.
  3 | 
  4 |  ## Table of Contents
  5 | 
  6 | - [Concepts](#concepts-)
  7 |     - [Files Controller](#files-controller)
  8 |     - [Seperation of Ideas](#seperation-of-ideas)
  9 |     - [Level of Useability](#level-of-useability)
 10 |     - [Organize the Files](#organize-the-files)
 11 | - [Advantages](#advantages-)
 12 | - [Knowledge Requirements](#knowledge-requirements-)
 13 | - [Features](#features-)
 14 | - [Getting Started](#getting-started)
 15 | - [Overview](#overview)
 16 |     - [Nice Configurations](#nice-configurations)
 17 |     - [Easy Validation](#easy-validation)
 18 |     - [CSRF Protection](#csrf-protection)
 19 |     - [Secure Password](#secure-password)
 20 |     - [Sql Injection Protection](#sql-injection-protection)
 21 | - [Core Classes](#core-classes-)
 22 |     - [Cookie Class](#cookie-class)
 23 |     - [Database Class](#database-class)
 24 |     - [Hash Class](#hash-class)
 25 |     - [Helper Functions](#helper-functions)
 26 |     - [Input Class](#input-class)
 27 |     - [Password Class](#password-class)
 28 |     - [Redirect Class](#redirect-class)
 29 |     - [Session Class](#session-class)
 30 | - [Helpful Classes](#helpful-classes-)
 31 |     - [Token Class](#token-class)
 32 |     - [User Class](#user-class)
 33 |     - [Validation Class](#validation-class)
 34 | 
 35 | ### Concepts :
 36 | When you use this app the first things you'll notice are the files and folder in the directory. The app folder composed of frontend and backend folders, which separates the front design and backend logic. The files that you saw in the outside of the app folder, I think as the controllers, think this as you play a jigsaw puzzle, you need to connect the different pieces to solve it or form it. So.. as you see the content of the files, there is no logic or designs include on it, except the require once function that use to insert or connect the files. Those require name defined in the 'start.php', to make it easier to memorize, act as an alias or be constant for the file locations.
 37 | 
 38 | To understand the structure and idea of this app, think in this way;
 39 | 
 40 | ##### Files Controller
 41 | The files that outside in the app folders are puzzles that you need to solve. Then the files inside in the app folder are the pieces of a puzzle that you need to require or connect.
 42 | 
 43 | ##### Separation of Ideas
 44 | The app folder contains two folders that are frontend and backend folder. Think of it as the separation of logic and design in your application.
 45 | 
 46 | ##### Level of Usability
 47 | The backend folder contains auth, classes, core folders. The lower the level, the low chance that you will use in your logic. Auth is level 2, Classes is level 1, and Core is level 0. So in Auth folder, where you will put your logic that connects from your frontend pages. Then the classes folders are your objects or tools that logic behind in Auth files. Then the Core folder is the abstract ideas behind your classes folder. And that's it.
 48 | 
 49 | ##### Organize the Files
 50 | The Frontend folder contains assets, includes, and pages folders which were chopped to reuse your design and codes. Like assets folder where the css, js, images lived, includes folder where the headers, navbar, messages, footer are separated and the pages folder where you all your application pages lived.
 51 | 
 52 | 
 53 | 
 54 | ### Advantages :
 55 | 
 56 | - Organize File Structure
 57 | - High Security
 58 | - Code Reuseable
 59 | 
 60 | ### Knowledge Requirements :
 61 | 
 62 | - [PHP Programming Basics](https://www.youtube.com/watch?v=XKWqdp17BFo&list=PLfdtiltiRHWHjTPiFDRdTOPtSyYfz3iLW)
 63 | - [Good Understanding in OOP](https://www.youtube.com/watch?v=ipp4WPDwwvk&list=PLfdtiltiRHWF0RicJb20da8nECQ1jFvla) (optional)
 64 | - Open Minded
 65 | 
 66 | ### Features :
 67 | 
 68 | - Nice Configurations
 69 | - Easy Validation
 70 | - CSRF Protection
 71 | - Secure Password
 72 | - Sql Injection Protection
 73 | - A lot of helpful classes.
 74 | 
 75 | ### Getting Started
 76 | 
 77 | #### [Download ZIP](https://github.com/jandaryl/simple-php-boilerplate/archive/master.zip) or Git Clone
 78 | ```php
 79 | git clone https://github.com/jandaryl/simple-php-boilerplate.git
 80 | ```
 81 | 
 82 | ### Setup environment
 83 | 
 84 | Follow the steps below:
 85 | 
 86 | 1. [Download and install Xampp](https://www.apachefriends.org/download.html), which is used to manage the system.
 87 | 2. Move the files to the htdocs folder of Xampp.
 88 | 3. Import the database and set the configuration. 
 89 | 
 90 | ### Overview
 91 | 
 92 | #### Nice Configurations
 93 | 
 94 | ``` php
 95 | <?php
 96 | // app/backend/auth/config.php
 97 | 
 98 | $GLOBALS['config'] = array(
 99 |     'app' => array(
100 |         'name'          => 'AppName',
101 |     ),
102 |     'mysql' => array(
103 |         'host'          => '127.0.0.1',
104 |         'username'      => 'root',
105 |         'password'      => '',
106 |         'db_name'        => 'php_boilerplate'
107 |     ),
108 |     ...
109 | 
110 | <?php
111 | // app/backend/core/Database.php
112 | require_once 'app/backend/auth/config.php';
113 | ...
114 | $pdo = new PDO('mysql:host='.Config::get('mysql/host').';'. // 127.0.0.1
115 |         'dbname='.Config::get('mysql/db_name'),             // php_boilerplate
116 |                   Config::get('mysql/username'),            // root
117 |                   Config::get('mysql/password')             // ''
118 |     );
119 | ```
120 | 
121 | #### Easy Validation
122 | 
123 | ```php
124 | <?php
125 | // app/backend/auth/update-account.php
126 | require_once 'app/backend/classes/Validation.php';
127 | 
128 | $validate = new Validation();
129 | 
130 | $validation = $validate->check($_POST, array(
131 |         'username'  => array(
132 |             'required'  => true,
133 |             'min'       => 2,
134 |             'unique'    => 'users'
135 |         ),
136 |         'current_password'  => array(
137 |             'required'  => true,
138 |             'min'       => 6,
139 |             'verify'    => 'password'
140 |         ),
141 |         'new_password'  => array(
142 |             'optional'  => true,
143 |             'min'       => 6,
144 |             'bind'      => 'confirm_new_password'
145 |         )
146 |         'confirm_new_password' => array(
147 |             'optional'  => true,
148 |             'min'       => 6,
149 |             'match'     => 'new_password',
150 |             'bind'      => 'new_password',
151 |             ),
152 |         ));
153 | 
154 | if ($validate->passed() {
155 |     // Awesome Logic...
156 | } else {
157 |     echo $validate->$error(); // First error message.
158 | 
159 |     foreach ($validate->errors() as $error) // All error messages.
160 |     {
161 |         echo $error;
162 |     }
163 | }
164 | ...
165 | ```
166 | 
167 | ### CSRF Protection
168 | 
169 | ```php
170 | <?php
171 | // 'app/frontend/pages/update-account.php';
172 | require_once 'app/backend/classes/Token.php';
173 | 
174 | ...
175 | <input type="hidden" name="csrf_token" value="<?php echo Token::generate(); ?>">
176 | <input type="submit" value="Register me">
177 | ...
178 | 
179 | <?php
180 | // 'app/backend/auth/update-account.php';
181 | require_once 'app/backend/core/Input.php';
182 | require_once 'app/backend/classes/Token.php';
183 | ...
184 | if (Token::check(Input::get('csrf_token')) {
185 |     // Do validation stuff...
186 | }
187 | ...
188 | ```
189 | 
190 | ### Secure Password
191 | 
192 | ```php
193 | <?php
194 | // app/backend/auth/config.php
195 | ...
196 | 'password' => array(
197 |         'algo_name' => PASSWORD_DEFAULT,
198 |         'cost'      => 10,
199 |         'salt'      => 50,
200 | ),
201 | ...
202 | 
203 | <?php
204 | // app/backend/auth/register.php
205 | require_once app/backend/core/Password.php
206 | ...
207 | $user->create(array(
208 |      ...
209 |     'password'  => Password::hash(Input::get('password')),
210 |      ...
211 |     ));
212 | ...
213 | 
214 | <?php
215 | // app/backend/auth/register.php
216 | require_once app/backend/classes/Validation.php
217 | ...
218 | if (Password::check($value, $this->_user->data()->password)) {
219 |     // Do awesome stuff...
220 | }
221 | ...
222 | ```
223 | 
224 | ### Sql Injection Protection
225 | ```php
226 | <?php
227 | // app/backend/core/Database.php
228 | ...
229 | $this->_pdo = new PDO('mysql:host='.Config::get('mysql/host')...);
230 | ...
231 | $this->_query->bindvalue($x, $param);
232 | ...
233 | $this->_results     = $this->_query->fetchAll(PDO::FETCH_OBJ);
234 | ...
235 | 
236 | ```
237 | 
238 | ### Core Classes :
239 | 
240 | #### Cookie Class
241 | ```php
242 | <?php
243 | require_once 'app/backend/core/Cookie.php';
244 | // check if cookie name is exists
245 | if (Cookie::exists(Config::get('remember/cookie_name'))) {
246 |     // ...
247 | }
248 | 
249 | // get the cookie value
250 | $cookie_value = Cookie::get(Config::get('remember/cookie_name'));
251 | 
252 | // delete the cookie value
253 | $cookie_value = Cookie::delete(Config::get('remember/cookie_name'));
254 | 
255 | ```
256 | 
257 | #### Database Class
258 | ```php
259 | <?php
260 | require_once 'app/backend/core/Database.php';
261 | 
262 | // Make Connection
263 | $database = Database::getInstance();
264 | 
265 | // Get the data from database.
266 | // $database->get($table, $where = array())
267 | $database->get('users', array('id', '=', '13');
268 | 
269 | // Insert the data to database.
270 | // $database->insert($table, $fields = array())
271 | $database->insert('users', array(
272 |                   'username'  => 'johnny123',
273 |                   'password'  => Password::hash('secret'),
274 |                   'name'      => 'JohnDoe',
275 |                   'joined'    => date('Y-m-d H:i:s')
276 |                ));
277 | 
278 | // Update the data from database.
279 | // $database->update($table, $id, $fields = array())
280 | $database->update('users', '13', array(
281 |                   'username'  => 'newusernname',
282 |                   'password'  => Password::hash('newsecret'),
283 |                   'name'      => 'newname',
284 |                ));
285 | 
286 | // Delete the data from database.
287 | // $database->delete($table, $where = array())
288 | $database->delete('users', array('id', '=', '13');
289 | 
290 | // Get the first data from database.
291 | $database->first();
292 | 
293 | // Count the data from database.
294 | $database->count();
295 | 
296 | // Return a results of object data from database.
297 | $database->results();
298 | 
299 | // Get error from query.
300 | $database->error();
301 | 
302 | ```
303 | #### Hash Class
304 | ```php
305 | <?php
306 | require_once 'app/backend/core/Hash.php';
307 | 
308 | // Make a hash base on the algorithm in config.
309 | $hash = Hash::make('string');
310 | 
311 | // Generate a unique hash.
312 | $hash = Hash::unique();
313 | 
314 | ```
315 | 
316 | #### Helper Functions
317 | ```php
318 | <?php
319 | require_once 'app/backend/core/Helpers.php';
320 | 
321 | escape('string');       // convert the html entities to quotes.
322 | autoload($classname);   // use to auto register all classes.
323 | cleaner('string');      // remove the /_/ then make upper the string.
324 | 
325 | ```
326 | #### Input Class
327 | ```php
328 | <?php
329 | require_once 'app/backend/core/Input.php';
330 | 
331 | // Check the request if empty such as post or get.
332 | if (Input::exists()) {
333 |     // Do some validation..
334 | }
335 | 
336 | // Get the value from that request.
337 | Input::get('csrf_token');
338 | 
339 | ```
340 | #### Password Class
341 | ```php
342 | <?php
343 | require_once 'app/backend/core/Password.php';
344 | 
345 | // Generate a hash based on the configs.
346 | $hash_password = Password::hash('secret');
347 | 
348 | // Check the hash if it needed to rehash.
349 | // This will occur if you changed the password config.
350 | if (Password::rehash('hash')) {
351 |     // Hash the password..
352 | }
353 | 
354 | // Verify the password from database stored hash.
355 | if (Password::check('secret', 'hash')) {
356 |     // Do awesome stuff...
357 | }
358 | 
359 | // Get the hash information. E.g. algo_name, cost, or salt.
360 | $password_info = Password::getInfo('hash');
361 | 
362 | ```
363 | 
364 | #### Redirect Class
365 | ```php
366 | <?php
367 | require_once 'app/backend/core/Redirect.php';
368 | 
369 | // Redirect the user from location that specify.
370 | Redirect::to('index.php');
371 | 
372 | ```
373 | #### Session Class
374 | ```php
375 | <?php
376 | require_once 'app/backend/auth/config.php';
377 | require_once 'app/backend/core/Session.php';
378 | 
379 | // Check the session name if exists in the server.
380 | if (Session::exists(Config::get('session/session_name'))) {
381 |     // Do awesome stuff...
382 | }
383 | 
384 | // Get the session name value.
385 | $session_value = Session::get(Config::get('session/session_name'));
386 | 
387 | // Delete the session name value.
388 | Session::delete(Config::get('session/session_name'));
389 | 
390 | // Set a flash message to display to the user.
391 | // Use this if want to message the user by their operation.
392 | // flash($message-name, $message)
393 | Session::flash('register-success', 'Thanks for registering! You can login now.');
394 | 
395 | ```
396 | 
397 | ### Helpful Classes :
398 | #### Token Class
399 | ```php
400 | <?php
401 | require_once 'app/backend/classes/Token.php';
402 | 
403 | // Generate token for csrf protection.
404 | $csrf_token = Token::generate();
405 | 
406 | // Check token if equal to the user token.
407 | if (Token::check($token)) {
408 |     // Do more validation...
409 | }
410 | 
411 | ```
412 | #### User Class
413 | ```php
414 | <?php
415 | require_once 'app/backend/classes/User.php'
416 | 
417 | // Make an instance for user.
418 | $user = new User();
419 | 
420 | // Note : Don't let this fool you..
421 | //        The logic was the same in database query.
422 | //        It just encapsulated by User Class.
423 | 
424 | // Create a user data.
425 | $user->create(array(
426 |             'username'  => Input::get('username'),
427 |             'password'  => Password::hash(Input::get('password')),
428 |             'name'      => Input::get('name'),
429 |             'joined'    => date('Y-m-d H:i:s'),
430 |         ));
431 | 
432 | // Update the user data.
433 | $user->update(array(
434 |             'username'  => Input::get('username'),
435 |             'password'  => Password::hash(Input::get('password')),
436 |             'name'      => Input::get('name'),
437 |             'joined'    => date('Y-m-d H:i:s'),
438 |         ), '13');
439 | 
440 | // Find the user if exists.
441 | $user->find('13');          // return true or false
442 | $user->find('johnny123');   // return true or false
443 | 
444 | // Login the user.
445 | // The 3rd argument is to check if the user want to remember.
446 | $user->login('johnny123', 'secret', true);
447 | 
448 | // Check the user if exists.
449 | $user->exists();
450 | 
451 | // Logout the user.
452 | // Delete the session and cookie that attached.
453 | $user->logout();
454 | 
455 | 
456 | // Get the user data in object way.
457 | $user->data();
458 | $user->data()->username;    // 'johnny123'
459 | $user->data()->name;        // 'JohnDoe'
460 | 
461 | // Check if the user logged in.
462 | $user->isLoggedIn();        // Return true or false.
463 | 
464 | // Delete the data from database.
465 | $user->deleteMe();
466 | 
467 | ```
468 | #### Validation Class
469 | ```php
470 | <?php
471 | require_once 'app/backend/classes/Validation.php'
472 | 
473 | // Make an new instance of Validation.
474 | $validate   = new Validation();
475 | 
476 | //  Available Rules :                               Notes :
477 | //          optional => true,               'can be null or no value'
478 | //          required => true,               'cannot be null or no value'
479 | //          bind     => 'input_name',       'make connect to other input'
480 | //          min      => 'any_number',       'minimum length of that input'
481 | //          max      => 'any_number',       'maximum length of that input'
482 | //          match    => 'input_name',       'check if match input from another'
483 | //          email    => true,               'check the input if valid email'
484 | //          alnum    => true,               'check if the input alpha numeric'
485 | //          unique   => 'table_name',       'check if the input unique from table'
486 | //          verify   => 'password',         'only in password, check the current'
487 | 
488 | $validation = $validate->check($_POST, array(
489 |                 'username'  => array(
490 |                     'required'  => true,
491 |                     'unique' => 'users',
492 |                     'min' => 2,
493 |                     'max' => 20,
494 |                     'matches' => 'password',
495 |                     alnum    => true
496 |                 ),
497 |             ));
498 | 
499 | // Check if there is an errors.
500 | if ($validate->passed() {
501 |     // Query to the database...
502 | } else {
503 |     // For first error message.
504 |     // echo $validate->$error();
505 | 
506 |     // For all error messages.
507 |     foreach ($validate->errors() as $error)
508 |     {
509 |         echo $error;
510 |     }
511 | }
512 | 
513 | ```
514 | 
515 | Thanks for reading! I hope this is useful...
516 | 
517 | ### License
518 | 
519 | Simple PHP Boilerplate is open-sourced software licensed under the [MIT license](https://opensource.org/licenses/MIT).
520 | 
521 | 
522 | 


--------------------------------------------------------------------------------