PHP Login script tutorial

(10-30-2012, 02:09 PM)Phibedy Wrote:

[To see links please register here]

Haven't known about stripslashes() before, I am just using mysql_real_escape_string(), do I really need both?
thx for sharing :smile:

Depends on your php settings.

@OP:
1- why do you use output buffering?
2- the script is vulnerable to bruteforcing, ALWAYS use the sleep() function after a failed login in order to delay the server's response.

(10-30-2012, 02:09 PM)Phibedy Wrote:

[To see links please register here]

Haven't known about stripslashes() before, I am just using mysql_real_escape_string(), do I really need both?
thx for sharing :smile:

The Stripslashes will help protect against xss to some degree and you should also be using mysqli because mysql is deprecated.

(10-30-2012, 02:09 PM)Phibedy Wrote:

[To see links please register here]

Haven't known about stripslashes() before, I am just using mysql_real_escape_string(), do I really need both?
thx for sharing :smile:

The Stripslashes will help protect against xss to some degree and you should also be using mysqli because mysql is deprecated.

very very nice , thx for this tutorial , it's very good , thx again :smile:)) ^_^