Forum Moderators: coopster

Message Too Old, No Replies

How safe can be a Login-System based on cookies?

         

charlee

7:18 pm on Apr 8, 2008 (gmt 0)

10+ Year Member



Hi guys, Im completly new in the server side web programming world, and I want to integrate a login system in a web page im developing right now, then i found one which seems to be good according to the references in the sourceforge.net website, its name is 'mojt login system' but i have my doubts about it cause all the security is based in a php file checking the info inside a cookie variable i mean is cookie based security:

if ($_COOKIE['mycookie'] == "register") {

echo "";

} elseif ($_COOKIE['mycookie'] != "register") {

md_login();

exit;

}

this is the summary of the protect.php file, i just want to know from the experts in this kind of issue if theres nothing wrong with this and is completly secure as long as i use the https protocol and the included functions of this software perform all the security required for a good login system or if on the other hand you think i should of try something else O_o.

I also want to integrate this login system with a shop online, so security is really important here, I need some tips about this if possible to help me work it out.

thanks in advance.

charlee

7:59 pm on Apr 8, 2008 (gmt 0)

10+ Year Member



well, i was checking this login system more in-depth and its not good at all, the php functions have the whole html code embeded i would need something different where the design and the code its not all mixed up. Im stacked ... :(

cameraman

8:05 pm on Apr 8, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



The buzzwords to look for are validation and authentication. Here's a good thread in this forum's library:
http://www.webmasterworld.com/forum88/4590.htm [webmasterworld.com]