Review your favorite Linux distribution.
Go Back > Forums > Non-*NIX Forums > Programming
User Name
Programming This forum is for all programming questions.
The question does not have to be directly related to Linux and any language is fair game.


  Search this Thread
Old 04-30-2006, 06:21 AM   #1
Registered: Jan 2005
Location: US
Distribution: Centos, Ubuntu, Solaris, Redhat
Posts: 396

Rep: Reputation: 31
A good secure login script with PHP and mySQL

I'm creating a PHP website and I need a login script that references a mySQL database, the database has already been created. A tutorial will do, not a long one please... I've got two books on how to do it, but there quite hefty (I picked professional editions, lol). So a very basic tutorial will do, oh yeah it also has to be secure, basic security at least a 64 bit MD5 hash will do.

Thanks guys,

always a great help
Old 04-30-2006, 10:10 AM   #2
Senior Member
Registered: Nov 2005
Location: Hanoi
Distribution: Fedora 13, Ubuntu 10.04
Posts: 2,379

Rep: Reputation: 148Reputation: 148
Check out the Pear scripts
Old 05-02-2006, 12:38 AM   #3
Wim Sturkenboom
Senior Member
Registered: Jan 2005
Location: Roodepoort, South Africa
Distribution: Ubuntu 12.04, Antix19.3
Posts: 3,794

Rep: Reputation: 282Reputation: 282Reputation: 282
Check your books for 'authentication'. I'm sure you'll find something. Else a search on the internet for php mysql authentication will give you plenty examples as well.

I use a 'user' table in every database (so not the user table provided in the mysql database itself).
When you add a user, you store the password in encrypted form. In the code below, replace mycrypt by one of the crypt functions supplied by MySQL (see chapter 12.9.2)
insert into user set login='genderbender',pwd=mycrypt('genderbender password')
The following code can be used for authentication
select * from user where login='supplied login' and pwd=mycrypt('supplied password')
If the query returns a row, it's a valid user.
Old 05-02-2006, 11:06 AM   #4
Registered: Oct 2004
Location: NY
Distribution: Slackware
Posts: 200

Rep: Reputation: 30
MD5 will definitely do it, as long as you create secure login web page. Make sure it's not XSS (cross site scripting) vulnerable and also make sure SQL injection is not possible through your input fields.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
SQUID login with PHP,MySQL ujjwal_wadhawan Linux - Software 0 03-20-2006 08:12 AM
Recommend a good book for PHP and mySQL vharishankar Programming 7 11-19-2004 07:55 AM
MySQl account login, PHP agallant Programming 2 07-16-2004 12:01 PM
What's a good php upload script for this? kleptophobiac Programming 2 01-31-2004 08:06 AM
PHP: secure login system markus1982 Programming 4 10-16-2003 12:50 PM > Forums > Non-*NIX Forums > Programming

All times are GMT -5. The time now is 01:07 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration