Jump to content

(Relatively) Secure PHP Login System?


k4

Recommended Posts

Hey all,

    I'm in the process of developing a PHP login system for the website of a team I'm involved with. I have a MySQL database already set up to hold user data, but I lack the knowledge to create a respectably secure login system. I tend to be a tad obsessive when it comes to security, and seeing different systems being implemented on various tutorials that cover this topic makes me cynical of the integrity of any of them. So, my question is: how can I create a secure login system that isn't too complex in implementation? Are there any reliable tutorials for this? Would some sort of system that uses session variables be what I'm looking for? I don't require excessive security, but privelidges gained if this system is compromised would be no small matter.

 

Thanks for any help.

Link to comment
https://forums.phpfreaks.com/topic/211846-relatively-secure-php-login-system/
Share on other sites

some great info here:

 

http://phpsec.org/articles/2005/password-hashing.html

 

and here:

 

http://www.ibm.com/developerworks/opensource/library/os-php-encrypt/

 

although the second one is a bit out of date, it had great concept coverage.

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.