PHP Login & User Management


IMPORTANT NOTICE – v5 is NOT backwards compatible with v 4.1.6!

v5.0.4 Released – Sep 08, 2020

Check out the changelog below for what’s new in this release.


PHP Login & User Management is the MySQL powered website PHP login script, another high quality script designed and created by Jigowatt exclusively for CodeCanyon.

By purchasing and integrating this script into your existing website you can create a private user area where visitors to your website have to be logged in to view page content.

It features changeable User Levels via the Control Panel in case your website requires different levels of page security amongst loads of other useful features!

Live Demo

You can view a demo of both the main installation and admin panel. Login with admin:admin

Main Features

Control Panel Features

  • Custom avatar upload
  • reCaptcha V2
  • Public profiles
  • Custom sign up fields
  • Translation ready with po/mo files
  • Twitter, Facebook, Google (Gmail), Yahoo login support
  • Two Factor Authentication via Twilio service
  • View timestamps when users login
  • Custom user profiles
  • HTML5 Valid – We’ve utilised Twitter Bootstrap for design
  • 100% Object Oriented
  • Installation wizard
  • Multiple user levels per user
  • Login expiration – Control default time before a user is logged out
  • AJAX Modal forgotten password screen
  • Email activation – Avoid false signups!
  • My Account (“Settings”) page
  • Lost activation (resend activation code to email)
  • Group based security for users
  • Welcome email and activation email
  • Extremely easy to integrate! Just run our Install Wizard
  • Reliable and secure MySQL database backend
  • Automatic AJAX field validation
  • Simple, ‘Are you human?’ signup validation
  • Forgotten password reset
  • Customise all outgoing emails with shortcodes
  • Update tracker – checks for available updates to the script
  • View list of users in a level
  • Customise the access denied messages
  • View list of recently registered users
  • Search through all users with AJAX
  • Add new user manually
  • Reset any user’s password
  • Edit any user’s level or access
  • View list of user levels
  • View number of users part of a user group
  • Search through user levels to edit
  • Disable/Enable entire user groups
  • Live demo speaks for itself!
<br />


Server Requirements

Full installation guide for simple integration in your existing website or as a stand-alone product.
You can view the documentation by following this link:

Supports PHP 5.6 or later
Supports MySQL 4.x or later (Requires 1 Database)
Can be tweaked or modified once purchased if you know the PHP language.


Please contact us with any questions you may have via the
contact form on our author profile page.

Updates – Available FREE to existing purchasers!

5.0.4 - 2020-09-08
* Fix: Social login buttons were always enabled, now they are based on settings.
* Fix: Pages appearing blank when config.php was missing.

5.0.3 - 2020-08-12
* Fix: Localisation bug which caused translations not to be loaded.

5.0.2 - 2020-08-11
* Tweak: Added a "config.sample.php" file to serve as a basis for "config.php".
* Tweak: Moved "php-login-version.txt" within the application directory.
* Fix: Version number upgrade bump.
* Fix: SMTP feedback message appearing when other settings were changed.
* Fix: Type mismatch when checking "restricted" status in admin panel.

5.0.1 - 2020-07-10
* Fix: BASE_URL issue

5.0.0 - 2020-06-17
* New: Google social login.
* New: Facebook social login.
* New: Twitter social login.
* New: SMTP support for emails.
* New: Included PHPMailer library.
* Tweak: Improved installer.
* Tweak: Improved database structure.
* Tweak: Improved input validations.
* Tweak: Improved user account activation.
* Tweak: Improved upgrade process.
* Tweak: Set BCRYPT as password hashing algorithm.
* Tweak: Converted user levels to user roles.
* Fix: Reports page in admin dashboard.
* Fix: Better internationalisation support.
* Fix: Numerous other minor fixes and tweaks.
* Fix: Delete login_confirm table

4.1.6 - 2020-06-19
* Fix: incorrect install link url

4.1.5 - 2020-06-18
* Fix: Pevent XSS vulnerability in user profile custom field entry
* Minor improvements

4.1.4 - 2019-04-02
* Fix: Repair broken User Activation.php page.
File Changes:

4.1.3 - 2019-01-30
* Fix: Repair inability to install the database as the install ability is never visible on the Home page.  Rework Header loading, error message display and the Generic class to set Paths.
4.1.2 - 2019-01-15
* New: Upgrade reCAPTCHA to version 2.0
* Fix: The change of a host for the demo and documentation site broke a lot of internal links.  This is now fixed to support the new host.
* Fix: Support for SSL (https) if required for Avatars.
* Fix: Rework PHP sessions to use the setting for cookie_lifetime.
* Fix: Establish consistent time zone (GMT).
* Fix: Replace outdated email check validation.

4.1.1 - 2018-05-15
 * Fix: Avatar uploads were capable of allowing site hacks with malicious PHP code embedded within image files.  This is now fixed.
 * Fix: Sort uploaded avatars by latest modification date
 * Fix: Change Documentation links to reflect new location on demo server (
 * Fix: Fix Documentation instructions for how to 'protect' a page

4.1.0 - 2017-06-12
 * New: The addition of a new password hashing algorithm (BCRYPT) available in PHP 5.5, set as the default and intended to replace the current MD5 and SHA256 methods which are very unsecure.
 * New: Two Factor Authentication by utilising mobile phone SMS technology with the Twilio framework.
 * New: Added a method $generic->get_user_field_by_name('label') for getting a custom user’s field.
 * Tweak: Upgrade `bootstrap` framework to latest stable version (3.3.7). remove from this software and use provided CDN's.
 * Tweak: Upgrade `jQuery` framework to latest stable version (3.2.1). remove from this software and use provided CDN's.
 * Tweak: Upgrade `Select2` framework to latest stable version (4.0.3).
 * Tweak: Upgrade `Hybridauth` API to latest stable version (2.9.5) for interaction between your application and the various social network APIs and identity providers such as Facebook, Twitter and Google.
 * Fix: Updated Google+ integration.
 * Fix: Facebook login issue.
 * Fix: Numerous minor fixes and tweaks.

4.00 - 2015-03-16
* New: The original developer (Matt) is back with new updates!
* New: Bootstrap 3, updated from Bootstrap 2
* New: Custom avatar uploads (Settings > General Options > Site control)
* Fix: Delete all of user's information from the database when deleting a user
* Fix: Social integration issues. Twitter, Facebook, Google and Yahoo
* Fix: jQuery plugins updated to latest versions
* Tweak: Breadcrumb added to admin panel
* Tweak: Global .POT file which translators require has been updated
* Tweak: Search suggest is more inline on admin panel
* Tweak: Unprofessional language removed. "Hank" and random smiley faces

3.21 - 2013-01-20
 * New: Italian language (thanks Mike Tommasi!)
 * Fix: Update checker froze and broke the admin pages
 * Fix: Wrong levels shown when editing a user
 * Fix: Default level setting field was sometimes too narrow and you couldn't select a level
 * Fix: Using email address as usernames was limited to 15 characters when signing up (thanks zvonfelten!)
 * Fix: Couldn't change personal details when using emails only (thanks Mike Tommasi!)
 * Fix: Couldn't click button to add new profile fields (thanks jamescannon!)

Follow us on Twitter

Tags: html5 jquery login google docs add users sign up management ajax integrate easy restrict disable edit users forgotten password activate activation mysql database validation validate membership database mysql

Ambertemplates Banner

Related posts