Secure PHP Login

Question

What is secure login? How can I develop it in PHP? Please keep in mind that I'm just new to PHP.

Answer 1

I would suggest getting an OpenID solution for inclusion on your site.

For example: PHP OpenID Library

Beyond OpenID, this article will give you a good start on the basics of PHP login.

Answer 2

it is better to answer the question: how to call the application to enter php "safe"?

here are some pointers (i'm also completely new to php, so pls carry with me)

• secure connection (via SSL)
• ( )
• validation - , (/ , , ..), ... ..

• http://www.site.com/loginpage.php - https://yoursite.com/login.php
• hashed password = md5 , phpass ( , , "pro" ).
• validation - php buiilt ( )

, , google-ing

Answer 3

, cookie (. php), cookie "" . , openid .

Answer 4

-

php , , - SQL-.

This most often happens with poorly sanitized inputs. Using mysql_real_escape_string () provides general protection. With the advent of OOP in PHP 5, it is very useful to consider using the PDO extension for PHP to create parameterized sql statements at the point at which the mysql server executes them.

PHP PDO Explanation and Examples