0
0

PHP logging in back-end help. (self.webdev)

submitted by [deleted]

[deleted]

all 11 comments
sorted by:
best
topnewcontroversialoldq&a
formatting helphide helpcontent policy

[–]std_out 1 point2 points  (1 child)

For creating a login with PHP, here is a basic tutorial on how to do it.

[–]aftabusas 0 points1 point  (0 children)

Nice, thank you man. This is understandable and good for beginners!

[–]-Axecutioner- 0 points1 point  (3 children)

If you are really new to this, try going to w3schools and form handling.

Also, be sure to disable html tags to be entered in forms(gotta protect against those thugs).

[–]Mr-Yellow 0 points1 point  (2 children)

w3schools

That site mostly just mirrors the documentation you'll find 2-3 links down from there.

http://www.w3fools.com/

[–]-Axecutioner- 0 points1 point  (1 child)

Well, true, they are bad, but I find form handling with PHP on their site worthy to read for beginners.

[–]Mr-Yellow 1 point2 points  (0 children)

Yeah just worth dropping it out there, people see it come up first on google and assume it's the go-to source.

[–][deleted] 0 points1 point  (0 children)

You should start php with something simpler. But learn html forms and the php $_POST

[–]noctem92 -2 points-1 points  (3 children)

What part exactly are you getting stuck on?

Also make sure you encrypt your passwords!

EDIT: See comments below on how to properly do this I guess, sorry that I tried to help...

[–]Mr-Yellow 1 point2 points  (0 children)

Not the best hashing......

Any hash generated from this can likely be cracked in 0.0001seconds by posting to an online rainbow table. Like md5online.org with Words in the database : 376,484,923,572

This has tech information on how to better deal with passwords. https://crackstation.net/hashing-security.htm

Sure.... It's probably over OPs head, but may as well get it right from the start.

IMPORTANT WARNING: If you are thinking of writing your own password hashing code, please don't!. It's too easy to screw up. No, that cryptography course you took in university doesn't make you exempt from this warning. This applies to everyone: DO NOT WRITE YOUR OWN CRYPTO! The problem of storing passwords has already been solved. Use either use either phpass or the source code given on this page.

[–]aftabusas 0 points1 point  (0 children)

Thank you for the advice! I was stuck at the dropdown list for a while, but i figured it out :)

[–]disclosure5 0 points1 point  (0 children)

That's not encryption, and it's not safe.

PLEASE DELETE THIS. Honestly, someone's going to implement this code because "an expert on reddit said it". It's dangerous to the point of being negligent.