Final PHP Project

# Chapter 30: Final PHP Project

1. Introduction #

2. Learning Objectives #

• Built a complete, dynamic Web Application.

• Implemented a secure User Authentication system.

• Executed full CRUD operations on a MySQL database.

• Structured your code professionally.

• Prepared a portfolio-ready project for your resume.

3. The Capstone Project: "TaskMaster CMS" #

Core Features Required:

1. 1. Public Homepage: A landing page explaining the app.

1. 2. Authentication: Users must be able to Register, Log In, and Log Out securely.

1. 3. Private Dashboard: A protected area only accessible to logged-in users.

1. 4. CRUD Functionality:

• Create: Users can add new Tasks (Title, Description, Status).

• Read: Users see a list of *only their own* tasks.

• Update: Users can mark tasks as "Complete" or edit the text.

• Delete: Users can delete their tasks.

1. 5. Security: Prevent XSS with output escaping, prevent SQLi with Prepared Statements, and protect routes with Sessions.

4. Step 1: Database Design #

Table 1: users

• id (INT, Primary Key, Auto Increment)

• username (VARCHAR 50, Unique)

• passwordhash (VARCHAR 255)

• createdat (DATETIME)

Table 2: tasks

• id (INT, Primary Key, Auto Increment)

• userid (INT) -> *This is the Foreign Key linking the task to the specific user!*

• createdat (DATETIME)

5. Step 2: Project Structure #

/taskmaster
├── /config
│   └── db.php          (PDO Connection)
├── /includes
│   ├── header.php      (HTML head, Navbar)
│   └── footer.php      (Closing tags, scripts)
├── index.php           (Public homepage)
├── register.php        (Registration logic & form)
├── login.php           (Login logic & form)
├── logout.php          (Session destroy)
├── dashboard.php       (Protected, lists tasks)
├── add_task.php        (Form to create tasks)
├── edit_task.php       (Form to update tasks)
└── delete_task.php     (Logic to delete tasks)

6. Step 3: Authentication Implementation #

1. 1. Build register.php. Hash the password using passwordhash(). Insert into the users table.

1. 2. Build login.php. Fetch the user, verify with passwordverify(). If successful, set $SESSION['userid'] = $user['id'];.

1. 3. In dashboard.php, add a check at the top: If !isset($SESSION['userid']), redirect them back to login.php.

7. Step 4: The Core CRUD Logic #

// Fetch ONLY tasks belonging to the logged-in user
$stmt = $pdo->prepare("SELECT * FROM tasks WHERE user_id = :uid ORDER BY created_at DESC");
$stmt->execute([':uid' => $_SESSION['user_id']]);
$tasks = $stmt->fetchAll();

When creating a task in add_task.php, insert the Session ID along with the form data:

$stmt = $pdo->prepare("INSERT INTO tasks (user_id, title, description, status) VALUES (:uid, :title, :desc, 'pending')");
$stmt->execute([
    ':uid' => $_SESSION['user_id'],
    ':title' => $_POST['title'],
    ':desc' => $_POST['description']
]);

8. Step 5: Security Audit #

• Did you use htmlspecialchars() inside your dashboard.php foreach loop when displaying task titles and descriptions?

• Are you using Prepared Statements for EVERY query?

• If a user changes the URL to deletetask.php?id=5, does your code check if Task #5 actually belongs to $SESSION['userid'] before deleting it? (Crucial Security Check!)

• Pagination: If a user has 100 tasks, use $GET['page'] and SQL LIMIT to only show 10 tasks per page.

• Search Bar: Add a GET form to let users search their tasks by keyword.

• OOP / MVC: Rewrite the entire project using Classes and the Model-View-Controller pattern!

11. How to Host Your Project #

1. 1. Buy a cheap shared hosting plan (Hostinger, Bluehost).

1. 2. Export your MySQL database from local phpMyAdmin as a .sql file.

1. 3. Import that .sql file into the live cPanel phpMyAdmin.

1. 4. Upload all your PHP files to the public_html folder using a File Manager or FTP client (like FileZilla).

1. 5. Important: Update your config/db.php file with the new live database username and password!

12. Final Words #

The PHP community is massive. Rely on the official PHP.net documentation, ask questions on StackOverflow, and keep building.

Congratulations on completing "PHP for Beginners"! Happy Coding!