All geek questions in one place

Secure authentication in PHP

Let me rephrase my last question, which library or PHP frame can I use for professional and secure authentication? Extra points if your idea helps implement the functions of the account control panel (change password, change profile).

How do you understand that? Have you ever done strong authentication with PHP?

+2
source share
4 answers

I personally really like the symfony framework and the sfGuard plugin. It provides a very easy authentication setup. It hashes and salts all passwords and provides an interface for managing users, groups, and permissions.

Symfonys routing and configuration makes it very easy to set a secure flag on every page or even the "area" of your website. I did not have to look elsewhere when creating a secure website.

+4
source

, , - ulogin.sourceforge.net. , , //. , sql/ldap .. PHP, Cake/CI, .

+2

Drupal? ssl . " " .

+1

ESAPI has a common structure that you can use, it will take a little reinstallation, but it is solid for what you are looking for. And, of course, authenticate via SSL, do not store authentication information on the client, etc.

+1
source

Source: https://habr.com/ru/post/1771493/

More articles:


All Articles