Jan 06 2010

Facebook Connect Tutorial

Giulio Pons @ 11:37 pm

This tutorial will guide you to the process of integration of your web community with Facebook. This means that when a visitor comes to your site it can log in with normal credenditals if it has, but if it has not it can click on the “facebook connect” button and try to log in with its facebook account, automatically.

This is a good thing because, of course, your community is not so big and famous that every visitor wants to register and become a user to leave just a comment, but probably your visitors already have a Facebook account. So why loose their comments?
More: you can use facebook connected users to post automatically on users’s facebook walls, that is to say, you can increase your traffic.

The target is to add facebook connect functionality with small changes to your code, we also want to make very small changes to your database and to your normal login process.

INDEX, SEVEN STEPS:
1. Create an application on Facebook
2. Copy on your site the xd_receiver.htm file
3. Download the PHP apis for facebook and copy them to your site
4. Modify your users’ table
5. Create a PHP page for log in with facebook connect
6. Link the fbclogin.php file to your login
7. Further implementations in the next posts/pages of this blog

So let’s start:

STEP 1. Create an application on Facebook

This means that you have to be registered and logged-in on Facebook, than you have to go to the developer page on facebook and click on the “set up new application” button.
In the set up page you have different fields to enter, but only these ones are needed to make a facebook-connect application for our purpose:
a. “name of the application” and your developer contact in the Main Panel;
b. “Connect url” in the Facebook Connect Panel, you should enter the root of your community site, for the example: http://www.your-site-url.com
c. you can customize log (not necessary)

Save the changes.
This will create a couple of keys that you will use inside your PHP login page: API Key and secret. Copy them or leave this window open to copy them later.

STEP 2. Copy on your site the xd_receiver.htm file

This file is also called “cross domain communication channel” and it’s a static file which include some javascript from facebook servers. The job of this file is set up cookie of Facebook on your domain. It’s necessary because cookies are linked to the domain of the site that write them, so Facebook cannot add cookies on your site without this. And cookies are necessary because the PHP script that will do the work will read cookies setted up by this file. Your site will call facebook, facebook will ask for password if the user isn’t yet logged in, and facebook will call xd receiver to set up cookies on your domain. Finally PHP script will read the cookie that say “logged on facebook ok!”.

Here is the xd receiver file: (you can find it here)

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>
<title>Cross-Domain Receiver Page</title>
</head>
<body>
<script src="http://static.ak.connect.facebook.com/js/api_lib/v0.4/XdCommReceiver.js?2" type="text/javascript"></script>
</body>
</html>

STEP 3. Download the PHP apis for facebook and copy them to your site

You can download the PHP API here on Github server.
You can find the previous link in the get started page of Facebook developers page.

STEP 4. Modify your users’ table

This is important: we want to let connect the guys of facebook, but we also want to make new users, so we create new users on our community for every new guy coming from facebook. We suppose that you already have a users’ table on your db:

TABLE users (something like this):

id	ID INT AUTOINCREMENT PRIMARY
username	VARCHAR
password	VARCHAR
email		VARCHAR
status		ENUM ('active','pending','deactivated')
activationdate	DATETIME

If you have the primary key on the email field, than you will have to remove it and use an autoincrement key because you will not receive the email from facebook, the users coming from facebook do not have the email field filled at the beginning. So they are “different”.

Add those fields to your users table:

fb_userid	VARCHAR
fl_facebook	ENUM ('new','normal','registered') DEFAULT = 'registered'

the fb_userid will store the facebook user id.
the fl_facebook is a flag and the values can be:

registered = is the default value that identify your users normally registered on your db
new = for new users just created
normal = for users that have been transformed into normal users (this could happen later, when you will ask the email to those users to make some action that only registered users can make on your site… for example buy a thing, subscribe to a newsletter, create a new item…), when they become ‘normal’ they are no longer ‘different’.

STEP 5.create a PHP page for log in with facebook connect

Here it is the code of the facebook login file (fbclogin.php), put it on your web site root (below some note) and read it because it’s full of comments:

<html xmlns="http://www.w3.org/1999/xhtml" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<script src="http://static.ak.connect.facebook.com/js/api_lib/v0.4/FeatureLoader.js.php" type="text/javascript"></script>
</head>
<body>
<?
//
// this file includes FB_API_KEY and FB_SECRET constants and the ConnectDB function
// to connect to your mysql database.
include("settings-and-functions.php");

//
// the php facebook api downloaded at step 3
include("fb/php/facebook.php");

if(!ConnectDB()) die;

//
// start facebook api with the codes defined in step 1.
$fb=new Facebook( FB_API_KEY , FB_SECRET );
$fb_user=$fb->get_loggedin_user();

$out="";
if($fb_user) {
	//
	// if we already have a user ID cookie than we link
	// in the database this user with his facebook account
	// using the fb_userid field.
	// this code assumes that when a user login in your
	// community you set up a value in a cookie called "myid".
	// this cookie is the one that you use when you want
	// to remember the user:
	if ($_COOKIE["myid"]) {
		//$rs = mysql_query( "select * from users where id <>'".$_COOKIE["myid"]."' and fb_userid='".$fb_user."'" );
		//$r = mysql_fetch_array($rs);
		mysql_query("update users set fb_userid='{$fb_user}' where id='".$_COOKIE["myid"]."'");
	}
	//
	// with the user id from facebook retrived with the API,
	// search for a user already registered with this process:
	$rs = mysql_query( "select * from users where fb_userid='$fb_user'" );
	if (mysql_num_rows($rs)) $u = mysql_fetch_array($rs); else $u="";
	if (is_array($u)) {
		//
		// this is a user connected with facebook
		// and already existing on your community.
		// So, log in automatically with user and password of
		// your community. These lens print a form and submit it
		// to your real login page:
		// (change the address in the action to match your normal login page)
		$out.="log in...";
		$out.="<form id='loginform' method='post' action=\"http://www.your-site-url.com/login.php\">";
		$out.="<input type='hidden' name='user' value=\"".$u['username']."\"/>";
		$out.="<input type='hidden' name='pass' value=\"".$u['password']."\"/>";
		$out.="</form>";
		$out.="<script type=\"text/javascript\">document.getElementById('loginform').submit();</script>";

	} else {
		//
		// this is a user logged in on facebook
		// but it doesn't exists on your community,
		// it's new!
		// So let's create automatically the user and log in!
		$out = '<fb:profile-pic class="fb_profile_pic_rendered FB_ElementReady"' .
		'facebook-logo="true" size="square" uid="' . $fb_user . '"></fb:profile-pic>';
		//
		// get some user details from facebook api
		$user_details = $fb->api_client->users_getInfo($fb_user, array('last_name','first_name'));
		//
		// write out some message to welcome the new user:
		$out.= $user_details[0]['first_name']." ".$user_details[0]['last_name'].", welcome on your-site-url.com<br/>";
		$out.= "creating your account on your-site-url.com... wait...";
		$tempuser = preg_replace("/[^a-z0-9]/i","",strtolower( $user_details[0]['first_name'].$user_details[0]['last_name'] ));
		$found = false;
		$i=0;
		while (!$found) {
			//
			// search for a valid username
			// not already used in your community
			// this username is created with first name and last name
			// from facebook and with a counter:
			$user = $tempuser.($i==0?"":$i);
			$rs = mysql_query("select count(*) from users where username='$user'");
			$c = mysql_fetch_row($rs);
			if ( $c[0] >0 ) $i++; else $found = true;
		}
		//
		// generate random password for new user:
		$pass = "fb".rand(1000,2000);
		//
		// empty email:
		$email = "";
		//create the user on your table
		$sql = "INSERT INTO users (" .
			"username, password, name, surname, email, status, activationdate, fb_userid, fl_facebook".
			") VALUES ('{$user}','{$pass}','".addslashes($user_details[0]['first_name'])."',".
			"'".addslashes($user_details[0]['last_name'])."','".$email."',".
			"'active',NOW(),'','".
			$fb_user."','new')";
		mysql_query($sql);
		//
		// new user created, log him in:
		$out.="log in...";
		$out.="<form id='loginform' method='post' action=\"http://www.your-site-url.com/login.php\">";
		$out.="<input type='hidden' name='user' value=\"".$user."\"/>";
		$out.="<input type='hidden' name='pass' value=\"".$pass."\"/>";
		$out.="</form>";
		$out.="<script type=\"text/javascript\">document.getElementById('loginform').submit();</script>";
	}
} else {
	//
	// the user probably isn't logged in on facebook, put out
	// the facebook button and clicking on it it will open a pop uo
	// that requires the login on facebook to proceed.
	// the "onlogin" command refresh the page.
	$out = '
	<div">Click to log on your-site-url.com with your facebook account.<br/><fb:login-button size="medium" onlogin="document.location.href=document.location.href;"></fb:login-button><br/>
	</div>';
}
?>
<?=$out?>
<script type="text/javascript">  FB.init("<?=FB_API_KEY?>", "/xd_receiver.htm"); </script>
</body>
</html>

This PHP file includes in the header some tag for facebook (the namespace declaration in the html tag), so it can handle FBML code (the facebook specific tags for html facebook elements).
Than it includes a javascript file from facebook which is called at the end with FB.init javascript call.

STEP 6. Link the fbclogin.php file to your login

Near your login fields, add a link to the fbclogin.php file so users will notice suddenly that you give a facebook connect functionality.

STEP 7. further implementations in the next posts

a. copy the avatar from facebook to your server: it’s easy: note, this is not approved by Facebook policies!
b. handle redirect to the correct page: if you have the login in every page you can modify this code to let the user go back to the correct page after the login process.
c. handle duplicated accounts: sometimes a user that connect with facebook already has an account on your site, so you will have two users for the same person on your db. That could be a problem, we will explain why and how to solve the problem.
d. handle registration completed: registration is completed when a user give you every data you consider mandatory, such as the email. This script already handles the flag fl_facebook, but in a further post we will explain how to modify your scripts to handle this part of the process.
e. use facebook connect functions to post to users wall on facebook: this will increase traffic to your site.

Share

97 Responses to “Facebook Connect Tutorial”

  1. Marlyn says:

    Fatal error: Call to undefined method Facebook::get_loggedin_user() in D:\wamp\www\books\connect\fbclogin.php on line 21

    PLS HELP ME :(

  2. Giulio Pons says:

    Read the comments: facebook has modified its class, so there is a different method!

  3. Marlyn says:

    I am a total beginner on this..

  4. Giulio Pons says:

    Marlyn, read comment number 48 from Alex. :-)

  5. Jaime says:

    when I click on the button “Connect” window opens and then closes, why?

  6. Steven says:

    I cannot get this to work for the life of me. I have a very simple members table in my mysql database.. its getting very frustrating.. can anyone help me with this simple task? please email admin@scautonow.com

  7. 5 social solutions to boost your website signups says:

    [...] server side developers, who want to integrate Facebook directly into their application signup.Facebook connect tutorial for PHPGoogle Friend connect, and Facebook connect tutorialFor .NET dev’s including retrieving user [...]

  8. Justen Doherty says:

    Hi All, after wrestling with this awful code for more than an hour i found this code on github: http://github.com/facebook/php-sdk/

    there’s a download button on the page if you are unfamiliar with git and i was up and running in a matter of minutes

  9. Glenn says:

    Step 1 is outdated or something
    you say: “Connect url” in the Facebook Connect Panel

    But nowhere on the application creation do either of these things exist?!

    So i cannot go past the first few lines of your wonderful tutorial

    Have facebook changed?

  10. Giulio Pons says:

    Probably yes, it’s changed.

  11. Jim Bower says:

    Just some friendly advice,

    I just spent over 2 hours trying to get this working without any luck,
    You might wanna write something like “THIS DOES NOT WORK ANYMORE, FACEBOOK HAS CHANGED” at the top of the page. Or update the content so it will work.

    Thanks,

  12. Red social says:

    Claro que si funciona, yo lo hice para conectarse con mi red social directamente desde tu perfil de facebook, si quieren vean y se convencerán: http://directorio.a60.us/jcow/ dice conectar básico y con facebook, así que amigo de verdad te agradezco por tan valioso aporte que me sacó de apuros. Los que no saben inglés sugiero que utilicen el navegador de google chrome que viene integrado con un traductor automático

  13. bright led says:

    Great article and right to the point. I am not sure if this is actually the best place to ask but do you folks have any thoughts on where to hire some professional writers? Thank you :)
    led flashlight

  14. Online Fashion says:

    Yes Facebook has changed,

    THIS TUTORIAL DOES NOT WORK ANYMORE. DON’T WASTE TIME READING.
    (Sorry for Caps)

  15. Giulio Pons says:

    It still works for me, but probably it doesn’t works with
    new facebook applications. If you have an old Facebook connect
    application it works, if you’ve registered an application recently
    I think it will not work.

  16. Abdul says:

    how can I connect to authenticate to count user for my facebook community group

  17. Stevie Renfroe says:

    Ingles not me firsd langage but much likey yor blog. Pleze to continyu fine posting and I like try copy,ok?

  18. debajani says:

    Hi All

    I have just created an app on facebook and want to try exactly the same thing as mentioned in the tutorial , but i read the comments and see that this is quite old and might not work for recently creates apps.

    can someone please give any pointer to some other tutorial or guide for facebook connect to work in website?

    PLS HELP !!!

    debjani

  19. Belak says:

    I can see you’re an expert at your field! I am launching a website soon, and your data will likely be really useful for me.. Thanks for all your assist and wishing you all of the success.

  20. fifa 11 says:

    What would all of us do without the amazing concepts you talk about on this website? Who has the fortitude to deal with vital topics just for common subscribers like me? My spouse and i and my buddies are very blessed to have your web blog among the types we often visit. Hopefully you know how a great deal we value your effort! Best wishes through us all.

  21. 2ne1 says:

    A lot of thanks for your own efforts on this blog. Kate takes pleasure in managing research and it is easy to see why. We hear all of the lively way you create simple tricks through your web blog and as well strongly encourage response from other ones about this topic while our favorite child is undoubtedly discovering a lot. Enjoy the rest of the year. You’re the one conducting a terrific job.

  22. Torrent Marketing says:

    This design is spectacular! You obviously know how to keep a reader entertained. Between your wit and your videos, I was almost moved to start my own blog (well, almost…HaHa!) Fantastic job. I really enjoyed what you had to say, and more than that, how you presented it. Too cool!

  23. Facebook Connect how to PHP | Open source Tutorials News and how to's says:

    [...] Here is the xd receiver file: (you can find it here) view sourceprint? [...]

  24. 關鍵字行銷 says:

    Hey there dude, I am seeking help on the ideas about website design. Your site is quite well on this issue. Would you mind writing more about how you make this? Thanks.

  25. www.esa-egypt.com/diving-forum/member.php?u=456289 says:

    Excellent post. I was checking constantly this blog and I am impressed! Extremely helpful info particularly the last part :) I care for such info much. I was looking for this particular info for a very long time. Thank you and best of luck.

  26. pyjama says:

    What? Hello. Awesome Job once again. I like coming to your site because the writers usually provide well written articles. Supreme blog post…I plan to add this blog to my faves. I am planning to subscribe to the websites feed as well. Recently purchased a brand new cellphone ! Any one own new iphone4?? It is so nice…..

  27. Faceboo says:

    Congratulations, your blog has all the credentials to be one of the best on the web.

  28. News says:

    I similar to your blog, and also including the article, and thank you for provide me much information

  29. auto-ecole lausanne says:

    I do believe many people would certainly concur with you

  30. gary says:

    amigo donde esta el archivo settings-and-functions.php

  31. alain says:

    its possible to integrate the login button in my site http://www.occasioneonline.com ?

  32. MdAmor says:

    Can you update this for the new fb:registration button?

  33. Giulio Pons says:

    I’m sorry, but I can’t update any post for some months. Sorry.

  34. Giulio Pons says:

    I think you have to read the facebook documentation, since this page became old and it seems it doesn’t work anymore.

  35. Giulio Pons says:

    it’s a your page with basic settings and functions…

  36. Earlean Laforge says:

    keep them comming

  37. LysLin says:

    Aw, this was a really nice post. In thought I would like to put in writing like this moreover – taking time and precise effort to make an excellent article… however what can I say… I procrastinate alot and not at all appear to get something done.

  38. window cleaning Lewisham says:

    You should take part in a contest for top-of-the-line blogs on the web. I’ll advocate this site!

  39. Towanda Anzualda says:

    Wow you hit it on the dot we shall submit to Plurk in addition to Squidoo well done انواع محركات الطائرات | هندسة نت was wonderful

  40. Leena Lievsay says:

    Hey there guys, newbie here. I’ve lurked about here for just a little although and thought I’d take part in! Looks like you’ve got quite a very good spot here

  41. Chris says:

    Use $fb->getUser() instead of $fb->get_loggedin_user(); in line 21. This helps.

  42. Nayan says:

    i cannot find settings-and-functions.php
    it gives me errors

    Warning: include(settings-and-functions.php) [function.include]: failed to open stream: No such file or directory in C:\AppServ\www\phase2.3\fbclogin.php on line 10

    Warning: include() [function.include]: Failed opening ‘settings-and-functions.php’ for inclusion (include_path=’.;C:\php6\pear’) in C:\AppServ\www\phase2.3\fbclogin.php on line 10

    Fatal error: Call to undefined function ConnectDB() in C:\AppServ\www\phase2.3\fbclogin.php on line 16

  43. Omnia Software says:

    Con il nuovo SDK abbiamo problemi mentre con la versione precedente funziona perfettamente

  44. Optiker Stockholm says:

    F*ckin? awesome things here. I?m very happy to look your article. Thanks a lot and i’m having a look ahead to touch you. Will you kindly drop me a e-mail?

  45. เย็ด says:

    Warning: include(settings-and-functions.php) [function.include]: failed to open stream: No such file or directory in C:\AppServ\www\phase2.3\fbclogin.php on line 10

  46. Do you care if you have the best internet marketing companies experts? Want to know more? | traviscai's Ireallybelieve says:

    [...] That’s to say, what do you want site visitors to be able to do while visiting the website? Beauty is a fading flower. Well, sometimes it is and sometimes it isn’t. That may result in the overall site needing a [...]

Leave a Reply