login-script | 易学教程

Designing a secure auto login cookie system in PHP

阅读更多关于 Designing a secure auto login cookie system in PHP

问题 I want to have an auto login option check for a user. Basically that means a cookie will be stored on the client side. Now the question is, how do I make it secure so the cookie will can not be spoofed/modified. One of my friends suggest having a db table that stores the session_id, user's ip, browser info, etc and then compare it all that information once a user goes to the website again. I feel like having a separate table for that is a bit too much trouble. Is there another way to do it?

Running a process at the Windows 7 Welcome Screen

阅读更多关于 Running a process at the Windows 7 Welcome Screen

So here's the scoop: I wrote a tiny C# app a while back that displays the hostname, ip address, imaged date, thaw status (we use DeepFreeze), current domain, and the current date/time, to display on the welcome screen of our Windows 7 lab machines. This was to replace our previous information block, which was set statically at startup and actually embedded text into the background, with something a little more dynamic and functional. The app uses a Timer to update the ip address, deepfreeze status, and clock every second, and it checks to see if a user has logged in and kills itself when it

Running a process at the Windows 7 Welcome Screen

阅读更多关于 Running a process at the Windows 7 Welcome Screen

问题 So here\'s the scoop: I wrote a tiny C# app a while back that displays the hostname, ip address, imaged date, thaw status (we use DeepFreeze), current domain, and the current date/time, to display on the welcome screen of our Windows 7 lab machines. This was to replace our previous information block, which was set statically at startup and actually embedded text into the background, with something a little more dynamic and functional. The app uses a Timer to update the ip address, deepfreeze

Where to put password_verify in login script?

阅读更多关于 Where to put password_verify in login script?

问题 Another night, another question! I have created a log in page which works fine if the passwords are in plain text. The issue I have is that my sign up form uses password_hash to enter an encrypted password to the table. My current scripts are below. Sign Up Script $password = password_hash($_POST[\'password\'], PASSWORD_DEFAULT); Log In Script <?php session_start(); if(isset($_POST[\'email\'], $_POST[\'password\'])){ require(\'../../../private_html/db_connection/connection.php\'); $conn = new

Where to put password_verify in login script?

阅读更多关于 Where to put password_verify in login script?

Another night, another question! I have created a log in page which works fine if the passwords are in plain text. The issue I have is that my sign up form uses password_hash to enter an encrypted password to the table. My current scripts are below. Sign Up Script $password = password_hash($_POST['password'], PASSWORD_DEFAULT); Log In Script <?php session_start(); if(isset($_POST['email'], $_POST['password'])){ require('../../../private_html/db_connection/connection.php'); $conn = new PDO("mysql:host=$servername;dbname=$dbname", $username, $password); $conn->setAttribute(PDO::ATTR_ERRMODE, PDO