Security Concerns while designing a login script / page in php + mysql

[MatrixBrains]

Hi All,

I am a bit new to php. I am designing a new login page for my website (using php, mysql database).

However, as php + mysql, both are open source, there are many security risks invovled, so that experienced users, while designing a login page, take care to follow certain guidelines.

Being a novice, i think it would be helpful to many (including me), to review here, once again, methods / procedures / guidelines to be followed, while designing a login script.
[So as to prevent the website login system from - unauthorized access, malicious inputs in login fields, etc].

Feedback from experienced users are VERY MUCH APPRECIATED & NEEDED.

Regards,
MB

[ergophobe]

The forum library [webmasterworld.com] has a thread on security [webmasterworld.com] that may help you.

BTW, the fact that PHP and MySQL are open source actually means that security is likely to be better, not worse.

[MatrixBrains]

hi ergophobe,

thanks for the info. i will first read all the threads in the library. (i missed out the library).

thanks again.

regards,
MB