Posted by totalstranger on 09/04/47 11:55

On or about 8/14/2006 12:56 PM, it came to pass that Binod Pant wrote:
> If you want to do it tourself you are better off using a database to store
> the username and password. Then use a simple php script that reads that info
> and compares it with what is read from the form. Try using the encryption
> features of php.
>
> The devshed page at
> http://www.devshed.com/c/a/PHP/Creating-a-Secure-PHP-Login-Script/
> has a pretty good example of how to do this.
>
> <damico@ev1.net> wrote in message
> news:1155574312.663290.207860@p79g2000cwp.googlegroups.com...
>> I'm a VERY basic webmeister for a non-profit group and need to password
>> protect an area. How does that work? Is there some boilerplate script
>> I can drop in?
>>
>
>
Those scripts are all well and good, but don't forget the periphery
that's also assumed to be available:
Script for "root admin" to add, maintain and delete
User signup
Forgot my password
Forgot my userid

not to forget about hackers attempting to break in and do some SQL
injection.

Suggest looking at some PHP classes that have this all built in.

[Back to original message]