simple admin area

[pea_1]

Hello, i need an admin area for one of my scripts and i've had some trouble with security in the past with this type of thing. So i just want to check if this is secure:

 

<form action="" method="post"><input name="password" type="text" /><input name="" type="submit" /></form>

<?php

if($_POST['password']){

include("settings.php"); //with $pw

if(md5($pw) == md5($_POST['password'])){

echo "in";

} else {

echo "out";

}

}

?>

 

Thanks, Peter

[s0c0]

In the settings.php file is the password just stored in there?  Why are you not using a database?

[pea_1]

After asking someone, i now have $pw as the hashed password. I'm not using a database because i don't have one.

[cmgmyr]

you should probably look into making a DB. This would be good for future use. I'm sure you would like to upgrade in the future or even sell you "system" to someone else...it would be pretty hard to keep track of 500+ users in a text file... (besides using a flat file DB...but thats still a DB)