![]() |
|
PHP Login script tutorial - Printable Version +- Sinisterly (https://sinister.li) +-- Forum: Coding (https://sinister.li/Forum-Coding) +--- Forum: PHP (https://sinister.li/Forum-PHP) +--- Thread: PHP Login script tutorial (/Thread-PHP-Login-script-tutorial) Pages:
1
2
|
RE: PHP Login script tutorial - zomgwtfbbq - 04-15-2013 (10-30-2012, 02:09 PM)Phibedy Wrote: Haven't known about stripslashes() before, I am just using mysql_real_escape_string(), do I really need both?Depends on your php settings. @OP: 1- why do you use output buffering? 2- the script is vulnerable to bruteforcing, ALWAYS use the sleep() function after a failed login in order to delay the server's response. RE: PHP Login script tutorial - TheDarkNight - 05-03-2013 (10-30-2012, 02:09 PM)Phibedy Wrote: Haven't known about stripslashes() before, I am just using mysql_real_escape_string(), do I really need both? The Stripslashes will help protect against xss to some degree and you should also be using mysqli because mysql is deprecated. RE: PHP Login script tutorial - TheDarkNight - 05-03-2013 (10-30-2012, 02:09 PM)Phibedy Wrote: Haven't known about stripslashes() before, I am just using mysql_real_escape_string(), do I really need both? The Stripslashes will help protect against xss to some degree and you should also be using mysqli because mysql is deprecated. RE: PHP Login script tutorial - iDF-Gerador - 03-04-2014 very very nice , thx for this tutorial , it's very good , thx again )) ^_^
|