PHP login script

[christine19reyes83]

can you help me how to make a login php i dont know how to put in my site

[Anna]

This is a question more suited for "Programming Help", so I'm moving it there.

[lemon-tree]

Unless you have an intimate knowledge of the security techniques involved in creating an authorisation script without any loopholes through which your users' data could be compromised, I recommend you look into using one of the many pre-built libraries that do precisely this.

[callumacrae]

I see from your website that you're attempting to make one yourself.

You should NOT be using mysql_* - check out PDO or MySQLi

As lemon-tree said, you need to know quite a bit about security to build a good login script. Of the top ten results on google for "php login script", most of them aren't good at all. Using PDO would reduce the risk of SQL injections, but there are other things to consider, such as brute forcing passwords (which your script currently doesn't make any attempt to stop)

You should also be using <input type="password" /> for the password field - as it is, anyone looking over my shoulder can see my password.

Make sure you're using a decent encryption for the password. You probably shouldn't be using md5, as quite a lot of people have broken it.

~Callum

[callumacrae]

Also, I edited the title of this thread to something more descriptive. Please make sure the thread title actually describes the issue in the future.

~Callum

[misson]

Christine, the thread "What are the top 10 common security risk of a new site? What are the countermeasures?" has links to pages describing common security issues. If you're going to implement your own authentication system, you'd better read over them.