premiso Posted November 11, 2008 Share Posted November 11, 2008 Hello, I am making a script for user authentication to avoid the page reload to authenticate a user. My question is, how secure is it to send the username/password combo to a script to authenticate the user? Should the password be encrypted before passed? Just curious I have always wondered if that would be a potential security flaw with someone sniffing the network. Thanks for any replies! Quote Link to comment Share on other sites More sharing options...
corbin Posted November 11, 2008 Share Posted November 11, 2008 Forms send through GET and POST requests just like AJAX does. Look into https if you're that concerned. Quote Link to comment Share on other sites More sharing options...
premiso Posted November 11, 2008 Author Share Posted November 11, 2008 Nope, I just wanted to make sure there wasn't a difference. I think I am going to be trying to create a new way (at least for me) of verifying the user so what is passed to the php won't exactly work another day. Anyhow thanks for that Corbin. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.