Skip to main content
Software Engineering

Return to Question

Tweeted twitter.com/#!/StackProgrammer/status/602930954383003648
Fixed spelling and formatting
Source Link
baritoneuk
baritoneuk
  • 383
  • 1
  • 4
  • 6

I am wanting to re-write my login scripts for clients websites to make them more secure. I want to know what best practices I can implement into this. Password protected control panels are in their abundance, but very few seem to impliment best practices in terms of code writing, speed and security. I

I will be using PHP and a MYSQL database. 

I used to use md5, but I see that sha256 pror sha512 would be better (together with secure hash and salt). Some

Some login scripts log the ip address throughout the session or even the user agent, but I want to avoid that as it isn't compatible with proxy servers. I

I am also a little behind the best practice in using sessions in PHP 5 (last time I read up was PHP 4) so some best practices with this would be helpful. Thanks

Thanks.

I am wanting to re-write my login scripts for clients websites to make them more secure. I want to know what best practices I can implement into this. Password protected control panels are in their abundance, but very few seem to impliment best practices in terms of code writing, speed and security. I will be using PHP and a MYSQL database. I used to use md5, but I see that sha256 pr sha512 would be better with secure hash and salt. Some login scripts log the ip address throughout the session, but I want to avoid that as it isn't compatible with proxy servers. I am also a little behind the best practice in using sessions in PHP 5 (last time I read up was PHP 4) so some best practices with this would be helpful. Thanks.

I am wanting to re-write my login scripts for clients websites to make them more secure. I want to know what best practices I can implement into this. Password protected control panels are in their abundance, but very few seem to impliment best practices in terms of code writing, speed and security.

I will be using PHP and a MYSQL database. 

I used to use md5, but I see that sha256 or sha512 would be better (together with secure hash and salt).

Some login scripts log the ip address throughout the session or even the user agent, but I want to avoid that as it isn't compatible with proxy servers.

I am also a little behind the best practice in using sessions in PHP 5 (last time I read up was PHP 4) so some best practices with this would be helpful.

Thanks.

Source Link
baritoneuk
baritoneuk
  • 383
  • 1
  • 4
  • 6

What best practices should be employed in a PHP login script?

I am wanting to re-write my login scripts for clients websites to make them more secure. I want to know what best practices I can implement into this. Password protected control panels are in their abundance, but very few seem to impliment best practices in terms of code writing, speed and security. I will be using PHP and a MYSQL database. I used to use md5, but I see that sha256 pr sha512 would be better with secure hash and salt. Some login scripts log the ip address throughout the session, but I want to avoid that as it isn't compatible with proxy servers. I am also a little behind the best practice in using sessions in PHP 5 (last time I read up was PHP 4) so some best practices with this would be helpful. Thanks.