Jump to content

Archived

This topic is now archived and is closed to further replies.

quasiman

php form: method="POST" - security

Recommended Posts

I'm starting out to make a system for people to save login/password information to a database (mysql) - basically a place to check all their pop3 email accounts from one login on my system.

I'll need the passwords in plain text so they can be passed correctly to the server for login details(IE: not md5), is it safe to post passwords through a hidden field form?

Share this post


Link to post
Share on other sites
No. People will be able to see them by doing a show source. Using sessions are a little more secure, but since sessions are stored in files, they can be read.

We'll need a little more information before we can advise you how to do this securely.

Ken

Share this post


Link to post
Share on other sites
[!--quoteo(post=369403:date=Apr 27 2006, 07:06 PM:name=kenrbnsn)--][div class=\'quotetop\']QUOTE(kenrbnsn @ Apr 27 2006, 07:06 PM) [snapback]369403[/snapback][/div][div class=\'quotemain\'][!--quotec--]
No. People will be able to see them by doing a show source. Using sessions are a little more secure, but since sessions are stored in files, they can be read.

We'll need a little more information before we can advise you how to do this securely.

Ken
[/quote]

The users would need to first create an account and login, then they would only see their own details for each page. Using foreign keys to have seperate tables for my users and their pop3 login details. If a person isn't logged in, they wouldn't see anything about it in the source.


Sorry I wasn't more clear...

Share this post


Link to post
Share on other sites

×

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.