password safety

[wonderboy]

Hi,

I just created a CMS for a site of mine using PHP, and to update the information you have to enter a password. At the moment it is just a simple if loop saying "if password = correctpass then add to database, otherwise exit"

Is there anyway that any nasty person can extract this from my PHP, do you think this is suitable for a simple CMS, and if not, what simple solutions can you suggest?

Thanks,

w.

[Timotheos]

Hi wonderboy,

Check out this thread on PHP security
[webmasterworld.com...]

and another one...
[webmasterworld.com...]