PHP Tutorial: Secure Your Login Form using Tokens

[TheBreakersValley]

What's the advantage to using classes? I have found them to actually be annoying when declaring variables..

[novozocker82]

Damn, fuck! Why is my english so bad? Its hard to follow you for me :) But you have great tutorials, dude!

[beneskew]

@caseyburk This does not secure anything. You can easily execute this same code on your own desktop (not on the server) and it will work.

One of the only ways to secure forms is to NOT use PHP's sessions. You make your own and save it to a database. Then when the form has been submitted you query the database for that session variable. If it doesn't exist, well, you got yourself someone trying to abuse your form.

This is useless and redundant code.

[mrwilson41]

excellent, thank you

[caseyburk]

So unless I'm mistaken, your intent behind the use of tokens is to eliminate (or reduce) the likelihood of someone downloading your working form in order to maliciously use it on their own server?

Do any methods exist that would allow someone to bypass this little trick? I find it hard to believe that this is a catch-all for this type of defense... Regardless, you have another subscriber. :.) Great job!

[MegaBlastDesigns]

@caseyburk by making a file that has a form like his but setting the session token = 1 and the input field token = 1

is my guess

[SilconOne]

Cool I like this better then what I was using thx

[ezida87]

tnx man