Gain insights into modern PHP by delving into POST requests, forms, sessions, and redirects to build a CRUD app with authentication, focusing on pure PHP without frameworks.

Learn PHP Without a Framework by Matthias Noback.png

php-setup.tar.gz

php-job

php-favi

php-pub

php-public

php-error

php-mult

php-tests

PHP for the Web is a terrific introduction on how to use modern PHP effectively. While there is a lot of material out there about building applications with PHP, most of them focus on using a framework like Laravel or Symfony. By working with pure PHP, you will be able to focus on the core ideas instead of how a particular framework implements them.

In this course, you will learn how to use multiple web technologies like POST requests, forms, sessions, and redirects to build a CRUD application with an authentication system.

By the end, you will have all the ingredients at your disposal to go out and build stunning, dynamic PHP web applications.

PHP for the Web: Learn PHP without a Framework

To determine if the user has provided the correct combination of username and password, we have to do two things:

- Look at the list of known users and see if the provided username is in that list.
- Compare the password of this user to the password that was submitted through the form.

## Hashing passwords
When keeping a list of usernames and passwords, the first rule is to never store the actual passwords.
Instead, we should store a so-called *hash* of the actual password.
A hash is a derived value and the process is one-way only.
You can create a hash of a password, but never "unhash" it to reveal the original password.

```text
Original password:
p@2nF6*Cp#dwONopJ$

Hash of the password:
$2y$10$OAo4dNYvb.UUyuWGw99xtOc0ey1WDE7oR8[and so on...]
```

Learn about the process of verifying user identities.

Getting Started

Serving Resources

Serving PHP Scripts

Forms

Cookies

Sessions

Authentication

PHP Project Structure

CRUD Part 1: Create

CRUD Part 2: The Rest

File Uploads

Error Handling

Automated Testing

Conclusion

Process of Verifying Users

Maintaining a list of known users

Hashing passwords