Preventing duplicate username entries when registering (PHP/MySQL [duplicate]

Question

I have looked around and have seen many examples of it done but have unfortunately not been able to implement it into the code I am currently using.

I am wanting to prevent users from having the same username when they register on my page but the code I am using allows the entries to be the same.

How can I modify the below code to prevent this from happening?

 <?php
            require('db.php');
            // If form submitted, insert values into the database.
            if (isset($_POST['username'])){
                $username = $_POST['username'];
                $email = $_POST['email'];
                $password = $_POST['password'];
                $username = stripslashes($username);
                $username = mysql_real_escape_string($username);
                $email = stripslashes($email);
                $email = mysql_real_escape_string($email);
                $password = stripslashes($password);
                $password = mysql_real_escape_string($password);
                $trn_date = date("Y-m-d H:i:s");

                $res_login = $conn->query("select * from users where username='$username'");
                if($res_login -> num_rows > 0)
                {
                      echo "Username is already exists please try with another username";
                }
                else
                {
                      $query = "INSERT into `users` (username, password, email, trn_date) VALUES ('$username', '".md5($password)."', '$email', '$trn_date')";
                      $result = mysql_query($query);
                      if($result)
                      {
                                  echo "You are registered successfully.</h3><br/>Click here to <a href='login.php'>Login</a></div>";
                      }
                      else
                      {
                                  echo "error in registration";
                      }
                }
         }
        ?>

any help would be highly appreciated.

why don't you use username as a primary key in your database? — bhansa
– bhansa, Commented Jun 18, 2016 at 11:21
The simplest way is to search your table for username before insert. — u_mulder
– u_mulder, Commented Jun 18, 2016 at 11:21
@u_mulder could you show me an example of how this is done, sorry I am quite new to this. — bcssmc
– bcssmc, Commented Jun 18, 2016 at 11:23
@Bhansa Its not a good approach. PK should be an int, for fast searching and sorting etc. Unique constraint can be used for username like columns. — Shaharyar
– Shaharyar, Commented Jun 18, 2016 at 11:29

Haresh Kumar · Accepted Answer · 2016-06-18 11:46:52Z

0

You can also set username as unique key index which will prevent duplicate rows to enter in table.

and review code below

<?php
    require('db.php');
    // If form submitted, insert values into the database.
    if (isset($_POST['username'])){
        $username = $_POST['username'];
        $email = $_POST['email'];
        $password = $_POST['password'];
        $username = stripslashes($username);
        $username = mysql_real_escape_string($username);
        $email = stripslashes($email);
        $email = mysql_real_escape_string($email);
        $password = stripslashes($password);
        $password = mysql_real_escape_string($password);
        $trn_date = date("Y-m-d H:i:s");
        $query = "INSERT into `users` (username, password, email, trn_date) VALUES ('$username', '".md5($password)."', '$email', '$trn_date')";
        $result = mysql_query($query);
        if (mysql_errno()) {
           if (mysql_errno()==1062) {
              echo "Username already taken.";
           }
        }else{
            if($result){
            echo "You are registered successfully.</h3><br/>Click here to <a href='login.php'>Login</a></div>";
        }
        }
    }else{
?>

Hope this works for you....

answered Jun 18, 2016 at 11:46

Haresh Kumar

5476 silver badges15 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

bcssmc Over a year ago

thank you this works perfect! I really appreciate the help on this

Community · Accepted Answer · 2017-05-23 11:58:48Z

0

The best approach would be to set username as a primary key in your database and it would give you error for duplicating.

Answering what you ask with your code, would be to search for the username, if it exists, dont add.

Anyway, your question is duplicated. Here

edited May 23, 2017 at 11:58

CommunityBot

11 silver badge

answered Jun 18, 2016 at 11:31

matiaslauriti

8,2004 gold badges37 silver badges48 bronze badges

Comments

Bhavin · Accepted Answer · 2016-06-20 07:41:54Z

0

Best way to check about uniqueness is that you have to set user name as primary key in your database but if want to manually check then check it using select query that username is already exist in your database or not ?

      <?php
            require('db.php');
            // If form submitted, insert values into the database.
            if (isset($_POST['username'])){
                $username = $_POST['username'];
                $email = $_POST['email'];
                $password = $_POST['password'];
                $username = stripslashes($username);
                $username = mysql_real_escape_string($username);
                $email = stripslashes($email);
                $email = mysql_real_escape_string($email);
                $password = stripslashes($password);
                $password = mysql_real_escape_string($password);
                $trn_date = date("Y-m-d H:i:s");

                $res_login = mysql_query("select * from users where username='$username'");
                $sql_num = mysql_num_rows($res_login);
                if($sql_num > 0)
                {
                      echo "Username is already exists please try with another username";
                }
                else
                {
                      $query = "INSERT into `users` (username, password, email, trn_date) VALUES ('$username', '".md5($password)."', '$email', '$trn_date')";
                      $result = mysql_query($query);
                      if($result)
                      {
                                  echo "You are registered successfully.</h3><br/>Click here to <a href='login.php'>Login</a></div>";
                      }
                      else
                      {
                                  echo "error in registration";
                      }
                }
         }
        ?>

Please use prepared statement for best programming practice. Visit this link : PDO::prepare manual

edited Jun 20, 2016 at 7:41

answered Jun 18, 2016 at 11:32

Bhavin

2,2086 gold badges39 silver badges56 bronze badges

2 Comments

bcssmc Over a year ago

thanks this seems to be the best answer, however the above code does not work for me

Qirel Over a year ago

You're mixing APIs here, which is why OP says it isn't working. OOP MySQLi and the old mysql_ (as OP originally used).

Collectives™ on Stack Overflow

Preventing duplicate username entries when registering (PHP/MySQL [duplicate]

3 Answers 3

1 Comment

Comments

2 Comments

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

1 Comment

Comments

2 Comments

Linked

Related