Nealec
01-11-2012, 10:00 AM
I am new to coding and have no clue about sessions cookies or anything needed to create a way for people to securely register and login to a site.
The site i have planned i expect (hope) to be used by my entire community so i really need to get it right without any vunerabilities.
Can anyone suggest any good resources or tutorials or anything that might help me?
Dan13071992
01-11-2012, 01:12 PM
hey there. weve never spoken before, there is a wide varity of resources to help you in this post:
http://www.codingforums.com/showthread.php?t=104161
good luck if you need any more help, im sure myself and others might be able to help you :)
Nealec
01-11-2012, 01:20 PM
hey there. weve never spoken before, there is a wide varity of resources to help you in this post:
http://www.codingforums.com/showthread.php?t=104161
good luck if you need any more help, im sure myself and others might be able to help you :)
Thankyou for the link i do already have some of those sites bookmarked and ill be sure to check out the rest of them.
Before your reply i did find this tutorial and i was wandering i you would look it over and tell me if its any good and worth using.
http://phpeasystep.com/phptu/6.html
Dan13071992
01-11-2012, 01:30 PM
from the first look i would have said no, this is because untill i read the whole thing down there was nothing to encrypt passwords, however, when i got near the bottom, it became apparent that there is a link to another tutorial that helps to encrypt passwords.
In my opinion I would use the password hashing (as i believe is the right term) called "SHA1" unless someone else would like to step in and tell you a better alternitive.
That tutorial is a basic, it does cover protecting against some form of SQL injections, however i would also suggest using this Captcha from the link below if you are going to use that, and as i just learnt how to impiment Captcha I would either use googles one called ReCaptcha, or use Sercurimage, both links are below:
Sercurimage (http://www.phpcaptcha.org)
Googles ReCaptcha service (http://www.google.com/recaptcha)