how to get started with session_key in php?

Discussions of secure PHP coding. Security in software is important, so don't be afraid to ask. And when answering: be anal. Nitpick. No security vulnerability is too small.

Moderator: General Moderators

Post Reply
azhan
Forum Commoner
Posts: 68
Joined: Fri Jun 27, 2008 6:05 am

how to get started with session_key in php?

Post by azhan »

hey guys!,

Im done creating my database which requires login authorization but what im lack of is my database are not secured enough, i just have login of username n password for security. Other than that, other user could get through the database if they knew the link.

Does any of u guys have any suggestion on how can i start learning/use session_key?

Thanks!


Azhan
----------------------------
http://www.productcoverdesign.com
alex.barylski
DevNet Evangelist
Posts: 6267
Joined: Tue Dec 21, 2004 5:00 pm
Location: Winnipeg

Re: how to get started with session_key in php?

Post by alex.barylski »

#1 Hash your passwords using sha256
User avatar
Mordred
DevNet Resident
Posts: 1579
Joined: Sun Sep 03, 2006 5:19 am
Location: Sofia, Bulgaria

Re: how to get started with session_key in php?

Post by Mordred »

http://php.net/manual/en/book.session.php
Generally, on login you raise a flag in the session, and on each page you check if it is 1.

Write some code and then post it if you have doubts if it's secure.
Post Reply