PHP code for validating the user's login information

[A000rf-3]

Database Structure:

email (Primary Key) - varchar(50) // Email address

fname - varchar(30) // First name

lname - varchar(30) // Last name

pw - varchar(20) // Password

id - varchar(50) // Session ID (Unix time value for valid session)

 

I need help validating user login and session time for the code in php.

main.php

index.php

[sKunKbad]

Before even looking at your files, I've got to advise you on your table schema for users.

 

1) The official length of an email address can be up to 255 characters.

 

2) Your password field length indicates that you may not be hashing your passwords, or if you are, then not doing it correctly. You should read up on bcrypt, or PHP's new password functions.

 

3) Your session ID being a unix time value is really weak, but if you insist, unix time is better stored as int(10).