Userlib - User Library

[eluser]Zeldinha[/eluser]
[quote author="Xikeon" date="1183779328"]I'm sorry? I don't really understand what you mean? Why would email as login auth be more secure?[/quote]

There are normally two things needed to log into a website: login auth and password. If you take the username as login auth and that username is visible on the website, you're already giving away 50% of the data required to login. Most users have silly passwords so it would be relatively easy to guess at least some of them, or maybe even hack them by brute force if you don't have a strikes system implemented (this seems unlikely, but who knows).

Emails are usually not shown publicly, so if you use the email instead of the username as login auth, you will effectively hide 100% of the data required to log in and make it almost impossible to guess (the only way is to make the user itself to give you his/her email somehow, which can happen, but then it's not your responsability).

That's why using the email is more secure than using the username

Either way, looks like a nice class, thanks for sharing, will try it

Regards,