About login script

[luke2012]

Hi,

 

Please forgive my ignorance in advance

 

I was wondering whether this script by about.com http://php.about.com/od/finishedphp1/ss/php_login_code.htm was a secure script (i.e. from SQL injections etc.), just wondering if I've missed anything obvious,

 

Huge thanks in advance,

 

Luke

[chris-s]

It's definitely dated. Uses the old mysql drivers... looks to depend on addslashes() for security. Looks like it can take a cookie value for the username, passing it to a query without sanitization.

 

I say no.