Top Comments
All Comments (29)
-
@rosswilliamson85 hehe none, i just wanted to know if thier is a way to make the password visible.. :) thnx so much to this tutorial sir it helps me a lot :) ;)
-
@01carlyn Once it is encryped you cannot see it again in the database but why would you want to? what are you trying to achive?
-
@rosswilliamson85 ahh okay thnx so much for this,
then how could i make the password visable again? if the password is encrypted.. o.O
-
@01carlyn You havent got to but if somebody hacks your webserver thay have access to all your users accounts because the password is visable so if i was you i would use md5 encryption
-
@01carlyn i dont think we speak the same logic language. if you encrypt the password as a md5, it's good for security. if not, you have a "leak" :)
-
You should always hash the user's password, so people looking at the database won't be able to see the plaintext versions. There are much safer hash and crypt functions than MD5 though, so using MD5 would be considered very bare minimum security.
Using the crypt function and a salt would be much better than plaintext or MD5.
Crypt example:
$safePassword = crypt($password, '$2a$12$' . $aSalt);
then
if ($realpassword == crypt($password, $realpassword)) // Log the user in
-
@ababeialexandru Y? is the cookie will not function if im not going to make ang the password as "MD5"?? hmm o.O
-
@01carlyn no
-
is it okay if im not going to make the password as "MD5"???
REPLY PLZZ
-
Hey, i was wondering, why did you make id the primary key? The chance is small, but with this setup two or more people could use the same name and password.
die() can not be ignored by the browser. PHP is independent from the server programming. PHP is the program that sends the information to the browser.
In regards to the checkbox - it is a good idea to add a value tag to the checkbox. To check if the box was checked you would test the checkbox for that value. FF makes the default value "on" but some browsers vary with this and therefore putting a value is required.
Great tutorial BTW.
ProfileTwist 2 years ago 9
Hello. Can't hackers create a Cookie in there browser with the username of a other user so they can go on there account?
Remi1115
Remi1115 11 months ago 7