Welcome Guest, Not a member yet? Register   Sign In
Improved secure login form
#3

First you should always store a (salted) hash of the password, not the password itself. You then compare the hash of the posted password to the stored hash. That way if your site goes get hacked the attacker cannot use the login credentials of your users on other sites for example.
Second, you should validate your users input before using it.

But seriously, I doubt your skill level is at the level it should be in order to create a secured login feature. I would advise you to implement an existing auth library. I use Ion auth in all my projects.
Reply


Messages In This Thread
Improved secure login form - by Marcolino92 - 08-15-2017, 11:25 PM
RE: Improved secure login form - by Paradinight - 08-15-2017, 11:38 PM
RE: Improved secure login form - by Diederik - 08-16-2017, 12:12 AM
RE: Improved secure login form - by Marcolino92 - 08-16-2017, 12:41 AM
RE: Improved secure login form - by Marcolino92 - 08-16-2017, 12:59 AM
RE: Improved secure login form - by Diederik - 08-16-2017, 01:23 AM
RE: Improved secure login form - by InsiteFX - 08-16-2017, 02:39 AM
RE: Improved secure login form - by InsiteFX - 08-17-2017, 02:29 AM



Theme © iAndrew 2016 - Forum software by © MyBB