Comments on 9lessons Programming Blog: PHP Login Script with Encryption.

This don't work. I've tried evrything. Whe...

2012-01-21T01:21:18.912+05:30

This don't work. I've tried evrything. When i've put the codes fom Welcome.php into my index.php it gives me this error; Parse error: syntax error, unexpected T_STRING, expecting '(' in /home/srkiller/public_html/s/index.php on line 5

+ Where do i change password+username, because when i enter somthing on login.php it come this;

Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/srkiller/public_html/s/login.php on line 16

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/srkiller/public_html/s/login.php on line 19

Change this in registry file $password=md5($passw...

2011-10-05T00:37:38.122+05:30

Change this in registry file

$password=md5($password); // Encrypted Password

to

$salt1 = "18gI%f5A";
$salt2 = "@Y4p91bN";
$password = md5($salt1.$password.$salt2);

Hi, Srinivas the registration is ok. but the login...

2011-07-12T23:23:38.734+05:30

Hi, Srinivas the registration is ok. but the login not go to my page welcome. please tell me how do it. I look it but tell me more please http://www.9lessons.info/2009/09/php-login-page-example.html

hi srinivas really very good link thanks lot

2011-03-21T16:36:51.473+05:30

hi srinivas really very good link
thanks lot

nice

2011-03-07T10:43:15.368+05:30

nice

@josea http://www.9lessons.info/2009/09/php-login...

2010-08-20T18:23:55.309+05:30

@josea

http://www.9lessons.info/2009/09/php-login-page-example.html

hey how to do with session?? and needed to destroy...

2010-08-20T17:57:52.302+05:30

hey how to do with session?? and needed to destroy

Hey, Great script and works perfectly. Thanks so ...

2010-04-16T03:55:29.640+05:30

Hey,

Great script and works perfectly. Thanks so very very much! I searched and searched and tried others and none worked but this one!!!

thats easy but there is no session cookie/remember...

2010-04-01T20:48:15.248+05:30

thats easy but there is no session cookie/remember me feature

next update you consider it

thanx nice script i use my web site login but char...

2010-03-01T15:35:38.550+05:30

thanx nice script i use my web site login but char(50) why md5 = 32 char ?????

Using the crypt function in PHP to encrypt passwo...

2010-02-19T11:52:47.227+05:30

Using the crypt function in PHP to encrypt passwords and other data and keep them safe.

Lol, why use 50 bytes for password hash --- passco...

2010-02-11T19:41:59.682+05:30

Lol, why use 50 bytes for password hash
---
passcode VARCHAR(50)
---
when md5 always produces hash of the fixed 32-char width? Also, hashing without salt is one of the worst examples you can provide for beginners.

*Not recommended until rewrite and update.*

This is a good example for a First Step in a Tutor...

2010-02-10T14:26:46.634+05:30

This is a good example for a First Step in a Tutorial but for a secure and encrypted php login there are more things needed.

e.g.: http://xkcd.com/327/

Do NOT use simple md5! Check out my password hashi...

2010-02-10T13:11:48.671+05:30

Do NOT use simple md5!
Check out my password hashing class with salt and random iterations:
http://juliusbeckmann.de/blog/php-easy-and-secure-password-hashing-class.html

I think you need also to secure the communication ...

2010-02-10T08:24:51.931+05:30

I think you need also to secure the communication line between user browser and your server using HTTPS so when user click login button data transfered in encrypted format.

If you can read Spanish, you will find a good post...

2010-02-10T06:11:18.867+05:30

If you can read Spanish, you will find a good post about PHP´s login system on this Blog:
http://www.juangiordana.com.ar/blog/2006/11/28/php-login-script/

Regards

Thank you. This is really nice for a PHP learner ...

2010-02-09T23:18:09.285+05:30

Thank you. This is really nice for a PHP learner like me. The critics should realize that anyone can enhance or extend your script based on their levels of expertise.

Keep the scripts coming!

Salt! I was also mislead by the word "encry...

2010-02-09T20:52:42.427+05:30

Salt!

I was also mislead by the word "encryption."
Good simple script though.

As others have said using MD5 alone is not encrypt...

2010-02-09T20:41:48.083+05:30

As others have said using MD5 alone is not encryption, it's simply hashing. This method is very insecure if your database were to become vulnerable.

@anon, he is using mysql_real_escape_string to san...

2010-02-09T20:38:10.121+05:30

@anon, he is using mysql_real_escape_string to sanitize for mysql and is NOT echoing the POST values back to the form, there isn't a strict need to htmlentities or strip tags if you are not echoing the data back to your page.

Still point taken, I sanitize all get and post data out of habit/paranoia.

This is pretty good, but we should note two things...

2010-02-09T20:13:11.616+05:30

This is pretty good, but we should note two things:
1. This isn't encryption, it's hashing.
2. It would be even better to salt the hash. For more information on salting database hashes, consult Google.

you don't check POST submitted data for vulner...

2010-02-09T19:09:02.759+05:30

you don't check POST submitted data for vulnerabilities, that will create major security holes

Thank you srinu nice tip, I want to encrypted pass...

2010-02-09T17:54:39.017+05:30

Thank you srinu nice tip,
I want to encrypted password to decrypt , is that possible in php, i want to use in forgot password page.

спасибо за подсказку! thanks !

2010-02-08T23:47:16.606+05:30

спасибо за подсказку! thanks !

use salt..

2010-02-08T07:50:27.698+05:30

use salt..