About admin panel login functions and avoid injection
Posted: Thu Feb 14, 2008 3:54 pm
Hi, This is my first message;
I just want to ask about control panel login security. In my system i use a different method. Because there is only one admin and they need only one username and password. I select all data from admin table on database and i send them an array. Then i compare the usernames and passwords, maybe via array_search or another fuction can be used, if username and password are true login else to the form.
I hope you will understand what i mean. I think this will avoid injection for the systems has few admin. I need your answers to be sure.
Thanks a lot
I just want to ask about control panel login security. In my system i use a different method. Because there is only one admin and they need only one username and password. I select all data from admin table on database and i send them an array. Then i compare the usernames and passwords, maybe via array_search or another fuction can be used, if username and password are true login else to the form.
I hope you will understand what i mean. I think this will avoid injection for the systems has few admin. I need your answers to be sure.
Thanks a lot