+- Sinisterly (https://sinister.li)
+-- Forum: Coding (https://sinister.li/Forum-Coding)
+--- Forum: PHP (https://sinister.li/Forum-PHP)
+--- Thread: MySQL and PHP simple login system (/Thread-MySQL-and-PHP-simple-login-system)
RE: MySQL and PHP simple login system - unnamed - 10-28-2013
(10-28-2013, 03:54 PM)Lust Wrote: Nice script. Easy to follow, and seems pretty safe. I've yet to break the security, and I've been messing with it for a little bit since I'm bored.
It's not secure anymore actually.
RE: MySQL and PHP simple login system - unnamed - 10-28-2013
(10-28-2013, 03:54 PM)Lust Wrote: Nice script. Easy to follow, and seems pretty safe. I've yet to break the security, and I've been messing with it for a little bit since I'm bored.
It's not secure anymore actually.
RE: MySQL and PHP simple login system - unnamed - 10-28-2013
(10-28-2013, 03:54 PM)Lust Wrote: Nice script. Easy to follow, and seems pretty safe. I've yet to break the security, and I've been messing with it for a little bit since I'm bored.
It's not secure anymore actually.
RE: MySQL and PHP simple login system - hellomen - 10-28-2013
(10-28-2013, 03:20 PM)noize Wrote:(10-28-2013, 08:17 AM)hellomen Wrote: nice tutorial but not good enough for security reasons
-it is sql injectable
-password instant storage?
-sessions over cookies?
mhm this are just 3 I could think of and those 3 are the most important things I suggest to not learn from this script but actuall use this script as a reminder on how to put it up on a logical way.
Huh? Password instant storage? Session over cookie?
You have clearly got no idea about what you're talking about. I clearly stated this is an old thread and that I should rewrite this from scratch to make something decent, but there are already tons of posts on such a matter.
Stop spamming with senseless statements.
seems like you aren't knowing what you say.
I don't don't care how old the thread edit I'm still allowed to answer of them whem I see people use this WRONG thread
password instant storage - obviously you didn't even encrypted it in this so it's intstanst password storage
Session over cookies - like the code said you uses sessions instead of cookies which isn't better it's even worse.
I exactly know what I am talking about if goes about such codes and I will not shut my mouth for such immagure kind of unsensed texts you wrote there.
I am not talking about other work as of with the register/login simply the fact that this is this thread and the other threads are others.
regards,
hellomen
ps: never try to make such butthurt texts.
RE: MySQL and PHP simple login system - hellomen - 10-28-2013
(10-28-2013, 03:20 PM)noize Wrote:(10-28-2013, 08:17 AM)hellomen Wrote: nice tutorial but not good enough for security reasons
-it is sql injectable
-password instant storage?
-sessions over cookies?
mhm this are just 3 I could think of and those 3 are the most important things I suggest to not learn from this script but actuall use this script as a reminder on how to put it up on a logical way.
Huh? Password instant storage? Session over cookie?
You have clearly got no idea about what you're talking about. I clearly stated this is an old thread and that I should rewrite this from scratch to make something decent, but there are already tons of posts on such a matter.
Stop spamming with senseless statements.
seems like you aren't knowing what you say.
I don't don't care how old the thread edit I'm still allowed to answer of them whem I see people use this WRONG thread
password instant storage - obviously you didn't even encrypted it in this so it's intstanst password storage
Session over cookies - like the code said you uses sessions instead of cookies which isn't better it's even worse.
I exactly know what I am talking about if goes about such codes and I will not shut my mouth for such immagure kind of unsensed texts you wrote there.
I am not talking about other work as of with the register/login simply the fact that this is this thread and the other threads are others.
regards,
hellomen
ps: never try to make such butthurt texts.
RE: MySQL and PHP simple login system - hellomen - 10-28-2013
(10-28-2013, 03:20 PM)noize Wrote:(10-28-2013, 08:17 AM)hellomen Wrote: nice tutorial but not good enough for security reasons
-it is sql injectable
-password instant storage?
-sessions over cookies?
mhm this are just 3 I could think of and those 3 are the most important things I suggest to not learn from this script but actuall use this script as a reminder on how to put it up on a logical way.
Huh? Password instant storage? Session over cookie?
You have clearly got no idea about what you're talking about. I clearly stated this is an old thread and that I should rewrite this from scratch to make something decent, but there are already tons of posts on such a matter.
Stop spamming with senseless statements.
seems like you aren't knowing what you say.
I don't don't care how old the thread edit I'm still allowed to answer of them whem I see people use this WRONG thread
password instant storage - obviously you didn't even encrypted it in this so it's intstanst password storage
Session over cookies - like the code said you uses sessions instead of cookies which isn't better it's even worse.
I exactly know what I am talking about if goes about such codes and I will not shut my mouth for such immagure kind of unsensed texts you wrote there.
I am not talking about other work as of with the register/login simply the fact that this is this thread and the other threads are others.
regards,
hellomen
ps: never try to make such butthurt texts.
RE: MySQL and PHP simple login system - hellomen - 10-28-2013
(10-28-2013, 03:20 PM)noize Wrote:(10-28-2013, 08:17 AM)hellomen Wrote: nice tutorial but not good enough for security reasons
-it is sql injectable
-password instant storage?
-sessions over cookies?
mhm this are just 3 I could think of and those 3 are the most important things I suggest to not learn from this script but actuall use this script as a reminder on how to put it up on a logical way.
Huh? Password instant storage? Session over cookie?
You have clearly got no idea about what you're talking about. I clearly stated this is an old thread and that I should rewrite this from scratch to make something decent, but there are already tons of posts on such a matter.
Stop spamming with senseless statements.
seems like you aren't knowing what you say.
I don't don't care how old the thread edit I'm still allowed to answer of them whem I see people use this WRONG thread
password instant storage - obviously you didn't even encrypted it in this so it's intstanst password storage
Session over cookies - like the code said you uses sessions instead of cookies which isn't better it's even worse.
I exactly know what I am talking about if goes about such codes and I will not shut my mouth for such immagure kind of unsensed texts you wrote there.
I am not talking about other work as of with the register/login simply the fact that this is this thread and the other threads are others.
regards,
hellomen
ps: never try to make such butthurt texts.
RE: MySQL and PHP simple login system - Vile - 10-28-2013
(10-28-2013, 06:33 PM)hellomen Wrote:(10-28-2013, 03:20 PM)noize Wrote:(10-28-2013, 08:17 AM)hellomen Wrote: nice tutorial but not good enough for security reasons
-it is sql injectable
-password instant storage?
-sessions over cookies?
mhm this are just 3 I could think of and those 3 are the most important things I suggest to not learn from this script but actuall use this script as a reminder on how to put it up on a logical way.
Huh? Password instant storage? Session over cookie?
You have clearly got no idea about what you're talking about. I clearly stated this is an old thread and that I should rewrite this from scratch to make something decent, but there are already tons of posts on such a matter.
Stop spamming with senseless statements.
seems like you aren't knowing what you say.
I don't don't care how old the thread edit I'm still allowed to answer of them whem I see people use this WRONG thread
password instant storage - obviously you didn't even encrypted it in this so it's intstanst password storage
Session over cookies - like the code said you uses sessions instead of cookies which isn't better it's even worse.
I exactly know what I am talking about if goes about such codes and I will not shut my mouth for such immagure kind of unsensed texts you wrote there.
I am not talking about other work as of with the register/login simply the fact that this is this thread and the other threads are others.
regards,
hellomen
ps: never try to make such butthurt texts.
I think your speech has dropped my IQ. Anyways, never, EVER, encrpyt/encode passwords, it's breakable. If you do, hash the encoded text, and then rehash the hashed encoded text. Sessions and cookies are both equally good AND bad. I can hijack both. You need to learn to spell, and right now my sentences are so fragmented.
RE: MySQL and PHP simple login system - Vile - 10-28-2013
(10-28-2013, 06:33 PM)hellomen Wrote:(10-28-2013, 03:20 PM)noize Wrote:(10-28-2013, 08:17 AM)hellomen Wrote: nice tutorial but not good enough for security reasons
-it is sql injectable
-password instant storage?
-sessions over cookies?
mhm this are just 3 I could think of and those 3 are the most important things I suggest to not learn from this script but actuall use this script as a reminder on how to put it up on a logical way.
Huh? Password instant storage? Session over cookie?
You have clearly got no idea about what you're talking about. I clearly stated this is an old thread and that I should rewrite this from scratch to make something decent, but there are already tons of posts on such a matter.
Stop spamming with senseless statements.
seems like you aren't knowing what you say.
I don't don't care how old the thread edit I'm still allowed to answer of them whem I see people use this WRONG thread
password instant storage - obviously you didn't even encrypted it in this so it's intstanst password storage
Session over cookies - like the code said you uses sessions instead of cookies which isn't better it's even worse.
I exactly know what I am talking about if goes about such codes and I will not shut my mouth for such immagure kind of unsensed texts you wrote there.
I am not talking about other work as of with the register/login simply the fact that this is this thread and the other threads are others.
regards,
hellomen
ps: never try to make such butthurt texts.
I think your speech has dropped my IQ. Anyways, never, EVER, encrpyt/encode passwords, it's breakable. If you do, hash the encoded text, and then rehash the hashed encoded text. Sessions and cookies are both equally good AND bad. I can hijack both. You need to learn to spell, and right now my sentences are so fragmented.
RE: MySQL and PHP simple login system - Vile - 10-28-2013
(10-28-2013, 06:33 PM)hellomen Wrote:(10-28-2013, 03:20 PM)noize Wrote:(10-28-2013, 08:17 AM)hellomen Wrote: nice tutorial but not good enough for security reasons
-it is sql injectable
-password instant storage?
-sessions over cookies?
mhm this are just 3 I could think of and those 3 are the most important things I suggest to not learn from this script but actuall use this script as a reminder on how to put it up on a logical way.
Huh? Password instant storage? Session over cookie?
You have clearly got no idea about what you're talking about. I clearly stated this is an old thread and that I should rewrite this from scratch to make something decent, but there are already tons of posts on such a matter.
Stop spamming with senseless statements.
seems like you aren't knowing what you say.
I don't don't care how old the thread edit I'm still allowed to answer of them whem I see people use this WRONG thread
password instant storage - obviously you didn't even encrypted it in this so it's intstanst password storage
Session over cookies - like the code said you uses sessions instead of cookies which isn't better it's even worse.
I exactly know what I am talking about if goes about such codes and I will not shut my mouth for such immagure kind of unsensed texts you wrote there.
I am not talking about other work as of with the register/login simply the fact that this is this thread and the other threads are others.
regards,
hellomen
ps: never try to make such butthurt texts.
I think your speech has dropped my IQ. Anyways, never, EVER, encrpyt/encode passwords, it's breakable. If you do, hash the encoded text, and then rehash the hashed encoded text. Sessions and cookies are both equally good AND bad. I can hijack both. You need to learn to spell, and right now my sentences are so fragmented.