Listen, as I'm novice in PHP, I will ask certain questions in this topic hoping on your contribution.







There are questions which I derived practicing the coding:

1. Do you put spaces between words and brackets, as well as comas when you do coding. For instance, $dbhost, $dbusername. Is it right, or you do not have to use space between.

2. On some tutorials, the users have been used the character ', some of the are using ". What is the different between them. Can I use ' or ". or it does not matter everything.

There are many aspects that I wanna ask you about.

Could check the coding format, and tell me about the mistakes I did. Please, let me know as soon as possible.

Just a pointer, you don't need to finish a comment with //. There are two sorts of comments in PHP - single line and multi-line. The single line comment is started with a // and applies from that point until the end of the line. This means you can place it after a line of code, like this:



A multi-line comment applies over multiple lines, and does require you to finish it. It is started with /* and ends with */
The advantage, of course, is that you can have much longer comments without really long lines:





It doesn't make any difference, but generally people put spaces in to make their code easier to read. For example, the second example here is much easier to read than the first example:



It is up to you to code how you want, but generally spaces are put after commas (i.e. in a list of parameters or variables) and around binary operators (=, +, -, *).



The single quote character takes its contents literally. Nothing placed in single quotes is parsed. This makes it faster, and more secure, but limits the uses.

The double quote character parses its contents. That makes it slower, but a bit more useful.

For example:



Would output:

So, spaces are allowed?!

For instance, if(...some function...) and if (...some function...), is it right or wrong?

Can use both of them or not?

You can use either of them and they will both work perfectly well. It depends entirely on your coding style as to which one you want to use. It is generally advised to add whitespace wherever it will make the code easier to read. So, if you look at a line, and you think it looks a little bit squashed, add some spaces in to make it easier to read.

Tabs are also a good idea to represent subsections of code. For example, in an if statement, the code that is executed is usually tabbed in, to separate it from the 'main' code:

OK. When you put equal sign in the coding, do I have to make spaces as well? Or generally both of them will be working?!

As has been said, you do not need spaces. It will work whether they are there or not. However, they are generally added to make it easier to read.

Thanks for your previous replies, were really helpful! How do I protect my user passwords in my database. If someone hacked the database, it was really hard for him to get passwords from that database. Please, list all good ways to do that.

The most common method is to 'encrypt' the user_password before you store it into the file or Database.
Then you need to encrypt the input before you compare the entry to the stored value. If they encrypted input is the same as the encrypted stored value (using the same encryption method, then the user is validated.

*EDIT*
In register.php, this is the insert command I use:

And in the Login.php, here is the code for checking the password you get at log-in with the encryted one in the Database:


The password is selected based on the encrypted value, so in the Log-in script, handle the results based on the number of records returned. If zero, no member has that email and password. If one, the person should be allowed into the page/site.