[zomgwtfbbq]

I prefer using captcha rather than using sleep and till now it has proven to be an effective measure to prevent bruteforcing

It's effective but not user friendly.

I use it in a way that form displays captcha if you have wrong password 5 consecutive times and then again after 5 times. So it makes it secure and friendly

Good decision. I've seen it a lot that after one or two times you'll have to solve the captcha every single time which is highly annoying.

[zomgwtfbbq]

I prefer using captcha rather than using sleep and till now it has proven to be an effective measure to prevent bruteforcing

It's effective but not user friendly.

I use it in a way that form displays captcha if you have wrong password 5 consecutive times and then again after 5 times. So it makes it secure and friendly

Good decision. I've seen it a lot that after one or two times you'll have to solve the captcha every single time which is highly annoying.

[hackarchives]

I prefer using captcha rather than using sleep and till now it has proven to be an effective measure to prevent bruteforcing

It's effective but not user friendly.

I use it in a way that form displays captcha if you have wrong password 5 consecutive times and then again after 5 times. So it makes it secure and friendly

Good decision. I've seen it a lot that after one or two times you'll have to solve the captcha every single time which is highly annoying.

What's your Level of PHP? I am looking for a small team for my website

[hackarchives]

I prefer using captcha rather than using sleep and till now it has proven to be an effective measure to prevent bruteforcing

It's effective but not user friendly.

I use it in a way that form displays captcha if you have wrong password 5 consecutive times and then again after 5 times. So it makes it secure and friendly

Good decision. I've seen it a lot that after one or two times you'll have to solve the captcha every single time which is highly annoying.

What's your Level of PHP? I am looking for a small team for my website

[zomgwtfbbq]

I prefer using captcha rather than using sleep and till now it has proven to be an effective measure to prevent bruteforcing

It's effective but not user friendly.

I use it in a way that form displays captcha if you have wrong password 5 consecutive times and then again after 5 times. So it makes it secure and friendly

Good decision. I've seen it a lot that after one or two times you'll have to solve the captcha every single time which is highly annoying.

What's your Level of PHP? I am looking for a small team for my website

I'm currently busy with programming a RPG from scratch and also need to work on my penetration testing cms so I'm sorry to say I don't have spare time. :Frown:

[zomgwtfbbq]

I prefer using captcha rather than using sleep and till now it has proven to be an effective measure to prevent bruteforcing

It's effective but not user friendly.

I use it in a way that form displays captcha if you have wrong password 5 consecutive times and then again after 5 times. So it makes it secure and friendly

Good decision. I've seen it a lot that after one or two times you'll have to solve the captcha every single time which is highly annoying.

What's your Level of PHP? I am looking for a small team for my website

I'm currently busy with programming a RPG from scratch and also need to work on my penetration testing cms so I'm sorry to say I don't have spare time. :Frown:

[CobraCode]

As said above, you may want to look into 'PDO' and 'mysqli'.

PHP Code:

$pas = hash('sha256', mysql_real_escape_string($_POST['password'])); //You don't need hash(), and why escape a string when it's going to be encrypted? $pas = sha1($_POST['password']); //also, rather than using mysql_real_... make a handy function such as this one: function clean($string) { return htmlentities(mysql_real_escape_string($string)); }

[CobraCode]

As said above, you may want to look into 'PDO' and 'mysqli'.

PHP Code:

$pas = hash('sha256', mysql_real_escape_string($_POST['password'])); //You don't need hash(), and why escape a string when it's going to be encrypted? $pas = sha1($_POST['password']); //also, rather than using mysql_real_... make a handy function such as this one: function clean($string) { return htmlentities(mysql_real_escape_string($string)); }