User Login Security...

[phpSensei]

K I have posted this before, and I already validated the input before the mysql_real_escape_string..

 

Just Want to know if there is anything else I can add to my script to make this login more secure.

 

<?php

$dbhost="localhost";
$dbuser="root";
$dbpass="";
$dbname="dbase";

$connect=mysql_connect($dbhost,$dbuser,$dbpass) or die("Error: " . mysql_error());
$db=mysql_select_db($dbname);


$username=mysql_real_escape_string($_POST['username']);
$password=mysql_real_escape_string($_POST['password']);>


$query_bad = "SELECT * FROM member WHERE username = '$username' and password ='$password'";
echo "Escaped Bad Injection: <br />" . $query_bad . "<br />";

[Daniel0]

You should do fine with mysql_real_escape_string().

[phpSensei]

THANKYOU, lol I am so glad now.