What is the best approach of creating a login System?

Posted by Starx on Stack Overflow See other posts from Stack Overflow or by Starx
Published on 2010-05-28T00:00:00Z Indexed on 2010/05/28 0:01 UTC
Read the original article Hit count: 164

Filed under:

php

|

login-system

|

best-approach

I am always wondering that the login systems I have created is vulnerable to attacks or not.

As many other programmers I also use sessions to hold a specific token token to know the login status. Cookies to hold the username or even sometime saved status.

What I am wondering is, Is this the right way? Is there any approach better that this?

© Stack Overflow or respective owner

Related posts about php

Magento, NGINX, PHP-FPM, APC, MEMCACHED, 16gb Ram CentOS, Spiking PHP-FPM to 100% CPU

as seen on Server Fault - Search for 'Server Fault'
I have been trying to resolve my issue of spiking cpu caused by php-fpm processes. I've reduced the php-fpm config settings to: pm = ondemand pm.max_children = 12 pm.start_servers = 2 pm.min_spare_servers = 2 pm.max_spare_servers = 10 pm.max_requests = 500 php_admin_value[memory_limit] = 128M Problem… >>> More
PHP Pear Installation on CentOS

as seen on Server Fault - Search for 'Server Fault'
[root@ip ~]# yum install php-pear* Reducing CentOS-5 Testing to included packages only Finished Setting up Install Process Package 1:php-pear-1.8.1-2.el5.centos.noarch already installed and latest versio … >>> More
Apache configurations for php "AddType text/html php" or "AddType application/x-httpd-php php .php"

as seen on Server Fault - Search for 'Server Fault'
I am taking over an application server and discover that it contain the following settings: AddType text/html php Although it works, but my understanding is that it should set as following: AddType application/x-httpd-php php .php What are the key differences between the two settings?… >>> More
mod_rewrite settings causes server to throw HTTP 500 errors instead of 404

as seen on Server Fault - Search for 'Server Fault'
Hello. I have a server with VBulletin forum (working under Apache 2.2, CentOS). The default settings for it in .htaccess are as follows: RewriteEngine on RewriteCond %{HTTP_HOST} ^gsmforum\.ru RewriteRule (.*) http://www.gsmforum.ru/$1 [R=301,L] # If you are having problems or are using VirtualDocumentRoot… >>> More
Problems installing Memcache (PECL extension)

as seen on Server Fault - Search for 'Server Fault'
I have installed memcached fine, and now I will need to install PECL extension memcache. Im running RedHat x86_64 es5. The installation gives me this: downloading memcache-2.2.6.tgz ... Starting to download memcache-2.2.6.tgz (35,957 bytes) ..........done: 35,957 bytes 11 source files, building running:… >>> More

Related posts about login-system

Wpf Login System

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi everyone. i am developing a training software in wpf. but i have problems. this application will be setup project. when the user make it work, a login window will open. User should enter his username.there wont be a password. but the problem is next; i dont know how to get userid from database… >>> More
Wordpress login system

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi I am new to wordpress. I'm creating template in wordpress with php.I would like to know how to integrate my own login page (which contain two boxes i.e, user name & password) with wordpress login system. Please anyone give a solution. Thanks in advance. by vinoth .J >>> More
how to implement a login system under php?

as seen on Stack Overflow - Search for 'Stack Overflow'
Are there any good tutorials on how to create your own registration, authentications using php/mysql/or javascript. >>> More
Login System details in JSF

as seen on Stack Overflow - Search for 'Stack Overflow'
how to use gmail user,yahoo user like that user their account to login my application which developed in JSF i want like Openinviter? >>> More
MyspaceID login system

as seen on Stack Overflow - Search for 'Stack Overflow'
I really would like to integrate the Myspace ID platform on my site using PHP, instead of allowing users to sign in to my site anytime with there myspace ID I am planning on just using it 1 time on signup process to allow them to import profile data from there myspace to my network. I have note been… >>> More