PHP Login

[davep86]

What are some good ways to deal with login authentication on a PHP web site?

 

[VPmase]

Elaborate on what you mean...

 

[Grandcruiser]

I think he's looking for a login system.

Deadlock

Deadlock is already scripted so...you can use it if you want.

How to Make a Login System for Your Website

There's a guide if you want to write your own script.

 

[davep86]

Thanks Grandcruiser, that helps.

 

[mrkgg]

Thanks That's a great tip

 

[mattura]

The second link is not altogether secure...

Code like this:

$name = $_POST['user'];
$q_user = mysql_query("SELECT * FROM USERS WHERE login='$name'");

is susceptible to attacks such as SQL injection. The input is trusted completely, which is a bad idea.

Also, it appears the passwords in the database are not encrypted, so any hacker, or database administrator can view all the passwords as plain text.

If you use this at all, don't put anything important in it!!
Just for learning purposes perhaps, until you realise all the security vulnerabilities.