
November 29th, 2012, 11:21 PM
|
 |
pollyanna
|
|
Join Date: Jul 2012
Location: Germany
|
|
Hi,
as great as E-Oreo's script is for learning, when it comes to real life applications, use the PHPass password library. It has actually been tested and proven to work, and it's pretty foolproof:
You should generally rely on established libraries for security stuff. Don't try to implement it yourself, because there are a lot of things you can do wrong (no, md5() does not create secure hashes).
The PHPass website also has an article about creating a simple login form:
http://www.openwall.com/articles/PHP-Users-Passwords
(but you shouldn't just copy and paste the code; understand what it does and then write your own script)
|