AuthKit PHP — Secure Login & Signup System with bcrypt, CSRF & Session Protection

AuthKit PHP — Secure Login & Signup System

A complete, self-contained user authentication system in pure PHP: signup + login + protected dashboard + logout. No database, no Composer, no framework — users are stored in a JSON file and it runs on any shared hosting or cPanel account. Perfect for beginners learning real PHP auth security, and a solid starting point for client projects.

Key Features

• bcrypt password hashing — passwords are stored only as hashes; plaintext is never saved, and old hashes auto-upgrade when PHP's default cost changes
• Session fixation protection — session_regenerate_id(true) runs on every login
• Hardened session cookies — HttpOnly + SameSite=Lax, Secure flag automatic on HTTPS
• CSRF tokens on every form — login, register and logout are all forgery-protected
• Strict server-side validation — name/email format checks, unique-email enforcement, password strength rules (8+ chars, letter + number)
• Protected dashboard page — anonymous visitors are bounced back to the login form

What's Inside

index.php (login) · register.php (signup) · dashboard.php (protected page) · logout.php · includes/bootstrap.php (session hardening + helpers) · includes/auth.php (storage, validation, auth logic) · assets/style.css (complete modern auth UI) · data/users.json (auto-created user store) · data/.htaccess (blocks web access to the store) · README.txt (setup + customization guide)

Setup — 2 Minutes

Upload the files to your host, make the data folder writable, open the folder in your browser and register your first account. Requirements: PHP 7.4+ with mbstring (enabled by default on virtually all shared/cPanel hosts).

Tested end-to-end before publishing: register → dashboard → duplicate-email rejection → wrong-password error → correct login → logout → protected-page redirect — all 12 checks passing, zero JavaScript errors.

Need a Custom Website or Mobile App?

Downloading free code is just the start. Yadu Tech builds complete websites and mobile apps for businesses — design, development, deployment, all done for you.

👉 Chat on WhatsApp