Okay, let's start building the foundational structure for a mobile social network. This will include basic user registration, login, and a placeholder for the feed. host};dbname={$this->db_name};charset={$this->charset}"; $options = [ PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION, PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC, PDO::ATTR_EMULATE_PREPARES => false, ]; try { $this->conn = new PDO($dsn, $this->username, $this->password, $options); } catch (PDOException $e) { // In a real app, log this error instead of echoing throw new PDOException($e->getMessage(), (int)$e->getCode()); } } /** * Get the singleton PDO instance. * * @return PDO */ public static function getInstance(): PDO { if (self::$instance === null) { // Late static binding to allow extension if needed $class = static::class; // Create the instance (which calls the private constructor) new $class(); } // The constructor assigns the connection to the static property // via the $conn property which is then assigned to self::$instance // This seems overly complex, let's simplify. // --- Simplified Singleton --- if (self::$instance === null) { $dsn = "mysql:host=" . DB_HOST . ";dbname=" . DB_NAME . ";charset=" . DB_CHARSET; $options = [ PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION, PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC, PDO::ATTR_EMULATE_PREPARES => false, ]; try { self::$instance = new PDO($dsn, DB_USER, DB_PASS, $options); } catch (PDOException $e) { // In a real app, log this error and show a generic message die("Database connection failed: " . $e->getMessage()); } } return self::$instance; } /** * Prevent cloning of the instance. */ private function __clone() {} /** * Prevent unserialization of the instance. */ public function __wakeup() { throw new \Exception("Cannot unserialize a singleton."); } } ?> db = $db; } /** * Find a user by their username. * * @param string $username * @return User|null */ public function findByUsername(string $username): ?User { $stmt = $this->db->prepare("SELECT * FROM users WHERE username = :username LIMIT 1"); $stmt->bindParam(':username', $username); $stmt->execute(); $userData = $stmt->fetch(PDO::FETCH_ASSOC); if ($userData) { $this->id = (int)$userData['id']; $this->username = $userData['username']; $this->email = $userData['email']; $this->passwordHash = $userData['password_hash']; $this->createdAt = $userData['created_at']; return $this; } return null; } /** * Find a user by their ID. * * @param int $id * @return User|null */ public function findById(int $id): ?User { $stmt = $this->db->prepare("SELECT * FROM users WHERE id = :id LIMIT 1"); $stmt->bindParam(':id', $id, PDO::PARAM_INT); $stmt->execute(); $userData = $stmt->fetch(PDO::FETCH_ASSOC); if ($userData) { $this->id = (int)$userData['id']; $this->username = $userData['username']; $this->email = $userData['email']; $this->passwordHash = $userData['password_hash']; $this->createdAt = $userData['created_at']; return $this; } return null; } /** * Register a new user. * * @param string $username * @param string $email * @param string $password * @return bool True on success, false on failure (e.g., user exists) */ public function register(string $username, string $email, string $password): bool { // Basic validation (more needed in a real app) if (empty($username) || empty($email) || empty($password)) { return false; } if (!filter_var($email, FILTER_VALIDATE_EMAIL)) { return false; } // Check if username or email already exists $stmt = $this->db->prepare("SELECT id FROM users WHERE username = :username OR email = :email LIMIT 1"); $stmt->bindParam(':username', $username); $stmt->bindParam(':email', $email); $stmt->execute(); if ($stmt->fetch()) { return false; // User already exists } // Hash the password $passwordHash = password_hash($password, PASSWORD_DEFAULT); if ($passwordHash === false) { // Handle hashing error (log it) return false; } // Insert new user $stmt = $this->db->prepare("INSERT INTO users (username, email, password_hash, created_at) VALUES (:username, :email, :password_hash, NOW())"); $stmt->bindParam(':username', $username); $stmt->bindParam(':email', $email); $stmt->bindParam(':password_hash', $passwordHash); return $stmt->execute(); } /** * Verify user login credentials. * * @param string $usernameOrEmail * @param string $password * @return bool True if credentials are valid, false otherwise */ public function login(string $usernameOrEmail, string $password): bool { $stmt = $this->db->prepare("SELECT * FROM users WHERE username = :identifier OR email = :identifier LIMIT 1"); $stmt->bindParam(':identifier', $usernameOrEmail); $stmt->execute(); $userData = $stmt->fetch(PDO::FETCH_ASSOC); if ($userData && password_verify($password, $userData['password_hash'])) { // Correct password, populate user object $this->id = (int)$userData['id']; $this->username = $userData['username']; $this->email = $userData['email']; $this->passwordHash = $userData['password_hash']; $this->createdAt = $userData['created_at']; return true; } return false; // Invalid username/email or password } } ?> 0, // Expires when browser closes 'path' => '/', 'domain' => '', // Set your domain in production 'secure' => isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on', // Use true in production with HTTPS 'httponly' => true, // Prevent JavaScript access 'samesite' => 'Lax' // Mitigate CSRF attacks ]); session_start(); } // Regenerate session ID periodically to prevent session fixation if (!isset($_SESSION['last_regen']) || time() - $_SESSION['last_regen'] > 1800) { // Regenerate every 30 minutes session_regenerate_id(true); $_SESSION['last_regen'] = time(); } } /** * Set a session variable. * * @param string $key * @param mixed $value */ public static function set(string $key, mixed $value): void { $_SESSION[$key] = $value; } /** * Get a session variable. * * @param string $key * @param mixed $default Default value if key not found * @return mixed */ public static function get(string $key, mixed $default = null): mixed { return $_SESSION[$key] ?? $default; } /** * Check if a session variable exists. * * @param string $key * @return bool */ public static function has(string $key): bool { return isset($_SESSION[$key]); } /** * Remove a session variable. * * @param string $key */ public static function remove(string $key): void { unset($_SESSION[$key]); } /** * Destroy the current session. */ public static function destroy(): void { if (session_status() === PHP_SESSION_ACTIVE) { // Unset all session variables $_SESSION = []; // Delete the session cookie if (ini_get("session.use_cookies")) { $params = session_get_cookie_params(); setcookie( session_name(), '', time() - 42000, $params["path"], $params["domain"], $params["secure"], $params["httponly"] ); } // Destroy the session session_destroy(); } } /** * Check if a user is logged in. * * @return bool */ public static function isLoggedIn(): bool { return self::has('user_id'); } /** * Get the logged-in user's ID. * * @return int|null */ public static function getUserId(): ?int { return self::get('user_id'); } /** * Set the logged-in user's ID. * * @param int $userId */ public static function setUserId(int $userId): void { self::set('user_id', $userId); } } ?> <?php echo $pageTitle ?? 'PHP Social Network'; ?>

SocialNet

Register

Already have an account? Login here.

Login

Don't have an account? Register here.

News Feed

Welcome to your feed! Posts from friends will appear here.

Create Post

username ?? 'User Profile'); ?>

id): // Only show details if user was found ?>

Username: username); ?>

Email: email); ?>

Member Since: createdAt)); ?>

Edit Profile

username) . "'s"; ?> Posts

Posts by this user will appear here.

register($username, $email, $password)) { // Optionally log the user in directly after registration if ($user->login($username, $password)) { SessionManager::setUserId($user->id); SessionManager::set('username', $user->username); // Store username in session header('Location: index.php?action=feed®istered=1'); // Redirect to feed exit; } else { // This shouldn't happen if registration succeeded, but handle just in case $error = "Registration successful, but auto-login failed. Please log in manually."; include __DIR__ . '/../templates/login.php'; exit; } } else { // Check if the failure was due to existing user $stmt = $db->prepare("SELECT id FROM users WHERE username = :username OR email = :email LIMIT 1"); $stmt->bindParam(':username', $username); $stmt->bindParam(':email', $email); $stmt->execute(); if ($stmt->fetch()) { $error = "Username or email already exists."; } else { $error = "Registration failed. Please try again."; } } } // If error occurred, fall through to show registration form again } include __DIR__ . '/../templates/register.php'; break; case 'login': if ($_SERVER['REQUEST_METHOD'] === 'POST') { $usernameOrEmail = trim($_POST['username_or_email'] ?? ''); $password = $_POST['password'] ?? ''; if ($user->login($usernameOrEmail, $password)) { SessionManager::setUserId($user->id); SessionManager::set('username', $user->username); // Store username in session header('Location: index.php?action=feed'); // Redirect to feed exit; } else { $error = "Invalid username/email or password."; } // If error occurred, fall through to show login form again } include __DIR__ . '/../templates/login.php'; break; case 'logout': SessionManager::destroy(); header('Location: index.php?action=login&loggedout=1'); // Redirect to login page exit; case 'feed': // Logic for fetching posts for the feed would go here include __DIR__ . '/../templates/feed.php'; break; case 'profile': // Logic to fetch profile data is handled within profile.php template include __DIR__ . '/../templates/profile.php'; break; case 'create_post': if ($_SERVER['REQUEST_METHOD'] === 'POST' && SessionManager::isLoggedIn()) { $content = trim($_POST['content'] ?? ''); $userId = SessionManager::getUserId(); if (!empty($content) && $userId) { // TODO: Implement Post class and save method // $post = new Post($db); // if ($post->create($userId, $content)) { // header('Location: index.php?action=feed&post_success=1'); // exit; // } else { // header('Location: index.php?action=feed&post_error=1'); // exit; // } // --- Placeholder --- // For now, just redirect back with a success message (or error) header('Location: index.php?action=feed&post_success=1'); // Simulate success exit; } else { header('Location: index.php?action=feed&post_error=1'); // Content was empty or user not found exit; } } else { // Redirect if not POST or not logged in header('Location: index.php?action=feed'); exit; } break; case 'edit_profile': // Placeholder for editing profile logic // Needs a form template (e.g., templates/edit_profile.php) // Needs logic here to handle POST requests to update user data if (!SessionManager::isLoggedIn()) { header('Location: index.php?action=login'); exit; } // For now, just show a placeholder message or redirect // include __DIR__ . '/../templates/edit_profile.php'; // Create this file echo "Profile editing not implemented yet."; // Placeholder break; default: // Fallback for unknown actions, maybe show 404 or redirect to feed/login http_response_code(404); echo "Page not found."; // Simple 404 // Or redirect: header('Location: index.php?action=feed'); exit; break; } ?> /* Basic Reset & Body Styles */ * { box-sizing: border-box; margin: 0; padding: 0; } body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif; line-height: 1.6; color: #333; background-color: #f0f2f5; display: flex; flex-direction: column; min-height: 100vh; } /* Layout Containers */ header { background-color: #fff; padding: 10px 20px; border-bottom: 1px solid #ddd; display: flex; justify-content: space-between; align-items: center; position: sticky; top: 0; z-index: 100; } main { flex-grow: 1; max-width: 800px; /* Limit content width */ width: 95%; margin: 20px auto; /* Center content */ padding: 20px; background-color: #fff; border-radius: 8px; box-shadow: 0 1px 3px rgba(0,0,0,0.1); } footer { text-align: center; padding: 15px; margin-top: 20px; font-size: 0.9em; color: #888; } /* Header Elements */ header h1 a { color: #1877f2; /* Facebook blue */ text-decoration: none; font-size: 1.5em; font-weight: bold; } header nav a { color: #1c1e21; text-decoration: none; margin-left: 15px; } header nav a:hover { text-decoration: underline; } header nav span { margin-right: 15px; color: #606770; } /* Forms */ form { margin-top: 20px; } form div { margin-bottom: 15px; } form label { display: block; margin-bottom: 5px; font-weight: bold; color: #606770; } form input[type="text"], form input[type="email"], form input[type="password"], form textarea { width: 100%; padding: 10px; border: 1px solid #ddd; border-radius: 6px; font-size: 1em; } form textarea { min-height: 80px; resize: vertical; } form button[type="submit"], button { background-color: #1877f2; color: #fff; padding: 10px 20px; border: none; border-radius: 6px; font-size: 1em; font-weight: bold; cursor: pointer; transition: background-color 0.2s ease; } form button[type="submit"]:hover, button:hover { background-color: #166fe5; } /* Links */ a { color: #1877f2; text-decoration: none; } a:hover { text-decoration: underline; } /* Utility Classes */ .error { color: #dc3545; background-color: #f8d7da; border: 1px solid #f5c6cb; padding: 10px; border-radius: 4px; margin-bottom: 15px; } .success { color: #155724; background-color: #d4edda; border: 1px solid #c3e6cb; padding: 10px; border-radius: 4px; margin-bottom: 15px; } /* Specific Sections */ h2 { color: #1c1e21; margin-bottom: 20px; border-bottom: 1px solid #eee; padding-bottom: 10px; } .post-form, .posts { margin-top: 30px; } .post-form h3, .posts h3 { margin-bottom: 15px; color: #606770; } .profile-details p { margin-bottom: 10px; } .profile-details strong { color: #4b4f56; } /* Basic Mobile Responsiveness */ @media (max-width: 600px) { header { flex-direction: column; align-items: flex-start; } header nav { margin-top: 10px; } header nav a { margin-left: 0; margin-right: 15px; } main { width: 100%; margin: 10px 0; border-radius: 0; box-shadow: none; padding: 15px; } } # Basic Apache rewrite rules for front controller RewriteEngine On # Redirect Trailing Slashes If Not A Folder... RewriteCond %{REQUEST_FILENAME} !-d RewriteRule ^(.*)/$ /$1 [L,R=301] # Handle Front Controller... RewriteCond %{REQUEST_FILENAME} !-d RewriteCond %{REQUEST_FILENAME} !-f RewriteRule ^ index.php [L] # Handle Authorization Header RewriteCond %{HTTP:Authorization} . RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] # Disable directory browsing Options -Indexes # Set default charset AddDefaultCharset UTF-8 # Basic Security Headers (Uncomment and configure properly in production) # # Header set X-Content-Type-Options "nosniff" # Header set X-Frame-Options "SAMEORIGIN" # Header set Referrer-Policy "strict-origin-when-cross-origin" # Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" env=HTTPS # Header set Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self';" # -- Basic database schema for the social network -- Execute this in your MySQL/MariaDB database CREATE DATABASE IF NOT EXISTS `social_network` DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci; USE `social_network`; -- Users Table CREATE TABLE `users` ( `id` INT UNSIGNED AUTO_INCREMENT PRIMARY KEY, `username` VARCHAR(50) UNIQUE NOT NULL, `email` VARCHAR(100) UNIQUE NOT NULL, `password_hash` VARCHAR(255) NOT NULL, `first_name` VARCHAR(50) NULL, `last_name` VARCHAR(50) NULL, `profile_picture` VARCHAR(255) NULL DEFAULT NULL, -- Path to profile picture `bio` TEXT NULL, `created_at` TIMESTAMP NULL DEFAULT CURRENT_TIMESTAMP, `updated_at` TIMESTAMP NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; -- Posts Table (Example - Needs refinement) CREATE TABLE `posts` ( `id` INT UNSIGNED AUTO_INCREMENT PRIMARY KEY, `user_id` INT UNSIGNED NOT NULL, `content` TEXT NOT NULL, `image_path` VARCHAR(255) NULL DEFAULT NULL, -- Path to optional image `created_at` TIMESTAMP NULL DEFAULT CURRENT_TIMESTAMP, `updated_at` TIMESTAMP NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE CASCADE -- Delete posts if user is deleted ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; -- Friendships Table (Example - Needs refinement for requests/status) CREATE TABLE `friendships` ( `id` INT UNSIGNED AUTO_INCREMENT PRIMARY KEY, `user_one_id` INT UNSIGNED NOT NULL, -- User initiating/sending request OR lower ID `user_two_id` INT UNSIGNED NOT NULL, -- User receiving request OR higher ID `status` ENUM('pending', 'accepted', 'declined', 'blocked') NOT NULL DEFAULT 'pending', `action_user_id` INT UNSIGNED NOT NULL, -- ID of the user who performed the last action (send request, accept, block) `created_at` TIMESTAMP NULL DEFAULT CURRENT_TIMESTAMP, `updated_at` TIMESTAMP NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, FOREIGN KEY (`user_one_id`) REFERENCES `users`(`id`) ON DELETE CASCADE, FOREIGN KEY (`user_two_id`) REFERENCES `users`(`id`) ON DELETE CASCADE, FOREIGN KEY (`action_user_id`) REFERENCES `users`(`id`) ON DELETE CASCADE, UNIQUE KEY `unique_friendship` (`user_one_id`, `user_two_id`), -- Prevent duplicate relationships CHECK (`user_one_id` < `user_two_id`) -- Ensure consistent ordering to simplify queries ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; -- Add indexes for performance ALTER TABLE `users` ADD INDEX `idx_username` (`username`); ALTER TABLE `users` ADD INDEX `idx_email` (`email`); ALTER TABLE `posts` ADD INDEX `idx_user_id` (`user_id`); ALTER TABLE `friendships` ADD INDEX `idx_user_one` (`user_one_id`); ALTER TABLE `friendships` ADD INDEX `idx_user_two` (`user_two_id`); ALTER TABLE `friendships` ADD INDEX `idx_status` (`status`); -- You might add tables for likes, comments, notifications, etc. later **To set this up:** 1. **Create Folders:** Create the directories `config/`, `src/`, `public/`, `public/css/`, and `templates/` in your project root (`/home/user/`). 2. **Save Files:** Place each file content into its corresponding path as specified in the `` tags. 3. **Database Setup:** * Make sure you have a MySQL/MariaDB server running. * Create a database named `social_network` (or update `config/database.php` and `database_schema.sql` if you use a different name). * Import the `database_schema.sql` file into your database to create the necessary tables (`mysql -u your_user -p social_network < database_schema.sql`). * Update the database credentials (host, username, password) in `config/database.php`. 4. **Web Server:** * Configure your web server (like Apache or Nginx) to point its document root to the `public/` directory. * Ensure `mod_rewrite` is enabled if using Apache for the `.htaccess` file to work. 5. **Permissions:** Ensure your web server has the necessary permissions to read the files and potentially write to session/log directories if needed later. 6. **Access:** Open your web browser and navigate to the URL configured for your project. You should see the login/register page. This provides a basic skeleton. You can now register users, log in, log out, and view placeholder pages for the feed and profiles. The next steps would involve implementing post creation/display, the friend system, profile editing, and refining the UI/UX.

Register

Login

News Feed

Create Post

Recent Posts

username ?? 'User Profile'); ?>

username) . "'s"; ?> Posts