Tidenburg Posted January 25, 2009 Share Posted January 25, 2009 I'm sure you get alot of these question here. So bear with me. I'm making a flash games portal (not your average game dump though) and i'd like to add a usersystem to my site. I know my way around PHP well enough and i've done this several times before just to try it out, but never for actual use in a public site. I understand i'll be using sessions to keep the login there, but could someone please list the security measure I should take in order to stop people cloning sessions and SQL injecting? I don't need a long essay, just a brief description will do. As i've said, i'm sure this will be a bit tedious if you get these question alot, so sorry already . Thanks in advance. (also, heh i've been registered here since 2006! Didn't know this account existed ) Quote Link to comment https://forums.phpfreaks.com/topic/142352-php-security/ Share on other sites More sharing options...
MadTechie Posted January 25, 2009 Share Posted January 25, 2009 See here http://www.phpfreaks.com/tutorial/php-security AND http://phpsec.org/projects/guide/4.html Quote Link to comment https://forums.phpfreaks.com/topic/142352-php-security/#findComment-745865 Share on other sites More sharing options...
Tidenburg Posted January 25, 2009 Author Share Posted January 25, 2009 Thanks, those are really helpfull. One question, how would the fingerprint in the first link be used? I get how it works but would I basically check it's the same each time around? Quote Link to comment https://forums.phpfreaks.com/topic/142352-php-security/#findComment-745902 Share on other sites More sharing options...
MadTechie Posted January 25, 2009 Share Posted January 25, 2009 Yes it work the same way each time. Quote Link to comment https://forums.phpfreaks.com/topic/142352-php-security/#findComment-746097 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.