Darkness Soul Posted March 27, 2006 Share Posted March 27, 2006 Hi,I've reading some references about mysql, but unlucky..I've been develop a login system, this login is a form that call a page "action.php" where the validation is executed..The system work wells, but, i like to know about the securit.. my select is like it:[code]$sql = ' SELECT * FROM tbUsers WHERE login="'. $login .'" AND pass="'. $pass .'" ';[/code]is this the best security form to use a login system? please, if its securyless, i want some help..Thanks folks,Soul Link to comment https://forums.phpfreaks.com/topic/5923-login-with-some-security/ Share on other sites More sharing options...
fenway Posted March 27, 2006 Share Posted March 27, 2006 I'm not sure what you mean by security -- I'd be more concerned about how you're sending the passcode itself. Link to comment https://forums.phpfreaks.com/topic/5923-login-with-some-security/#findComment-21196 Share on other sites More sharing options...
Darkness Soul Posted March 27, 2006 Author Share Posted March 27, 2006 [!--quoteo(post=358889:date=Mar 27 2006, 11:20 AM:name=fenway)--][div class=\'quotetop\']QUOTE(fenway @ Mar 27 2006, 11:20 AM) [snapback]358889[/snapback][/div][div class=\'quotemain\'][!--quotec--]I'm not sure what you mean by security -- I'd be more concerned about how you're sending the passcode itself.[/quote]Someone told me that my sql isnt secure, someone can use it as a vulnerability... Link to comment https://forums.phpfreaks.com/topic/5923-login-with-some-security/#findComment-21239 Share on other sites More sharing options...
fenway Posted March 27, 2006 Share Posted March 27, 2006 Well, provided you protect against injection attacks, your queries/scripts are only as secure as your connection itself. Link to comment https://forums.phpfreaks.com/topic/5923-login-with-some-security/#findComment-21262 Share on other sites More sharing options...
shoz Posted March 27, 2006 Share Posted March 27, 2006 Read through this [a href=\"http://phpsec.org/projects/guide/\" target=\"_blank\"]security guide[/a], in particular the SQL INJECTION topic and look at the php function [a href=\"http://www.php.net/mysql_real_escape_string\" target=\"_blank\"]mysql_real_escape_string[/a]. Link to comment https://forums.phpfreaks.com/topic/5923-login-with-some-security/#findComment-21295 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.