Login - Printable Version

Login - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Coding (https://sinister.ly/Forum-Coding)
+--- Forum: PHP (https://sinister.ly/Forum-PHP)
+--- Thread: Login (/Thread-Login)

Pages: 1 2

RE: Login - zomgwtfbbq - 09-20-2014

(09-20-2014, 12:48 PM)hackarchives Wrote:
(09-19-2014, 06:11 PM)zomgwtfbbq Wrote:
(09-12-2014, 07:45 PM)hackarchives Wrote: I prefer using captcha rather than using sleep and till now it has proven to be an effective measure to prevent bruteforcing
It's effective but not user friendly.

I use it in a way that form displays captcha if you have wrong password 5 consecutive times and then again after 5 times. So it makes it secure and friendly

Good decision. I've seen it a lot that after one or two times you'll have to solve the captcha every single time which is highly annoying.

RE: Login - zomgwtfbbq - 09-20-2014

(09-20-2014, 12:48 PM)hackarchives Wrote:
(09-19-2014, 06:11 PM)zomgwtfbbq Wrote:
(09-12-2014, 07:45 PM)hackarchives Wrote: I prefer using captcha rather than using sleep and till now it has proven to be an effective measure to prevent bruteforcing
It's effective but not user friendly.

I use it in a way that form displays captcha if you have wrong password 5 consecutive times and then again after 5 times. So it makes it secure and friendly

Good decision. I've seen it a lot that after one or two times you'll have to solve the captcha every single time which is highly annoying.

RE: Login - hackarchives - 09-20-2014

(09-20-2014, 01:23 PM)zomgwtfbbq Wrote:
(09-20-2014, 12:48 PM)hackarchives Wrote:
(09-19-2014, 06:11 PM)zomgwtfbbq Wrote:
(09-12-2014, 07:45 PM)hackarchives Wrote: I prefer using captcha rather than using sleep and till now it has proven to be an effective measure to prevent bruteforcing
It's effective but not user friendly.

I use it in a way that form displays captcha if you have wrong password 5 consecutive times and then again after 5 times. So it makes it secure and friendly
Good decision. I've seen it a lot that after one or two times you'll have to solve the captcha every single time which is highly annoying.

What's your Level of PHP? I am looking for a small team for my website

RE: Login - hackarchives - 09-20-2014

(09-20-2014, 01:23 PM)zomgwtfbbq Wrote:
(09-20-2014, 12:48 PM)hackarchives Wrote:
(09-19-2014, 06:11 PM)zomgwtfbbq Wrote:
(09-12-2014, 07:45 PM)hackarchives Wrote: I prefer using captcha rather than using sleep and till now it has proven to be an effective measure to prevent bruteforcing
It's effective but not user friendly.

I use it in a way that form displays captcha if you have wrong password 5 consecutive times and then again after 5 times. So it makes it secure and friendly
Good decision. I've seen it a lot that after one or two times you'll have to solve the captcha every single time which is highly annoying.

What's your Level of PHP? I am looking for a small team for my website

RE: Login - zomgwtfbbq - 09-20-2014

(09-20-2014, 03:43 PM)hackarchives Wrote:
(09-20-2014, 01:23 PM)zomgwtfbbq Wrote:
(09-20-2014, 12:48 PM)hackarchives Wrote:
(09-19-2014, 06:11 PM)zomgwtfbbq Wrote:
(09-12-2014, 07:45 PM)hackarchives Wrote: I prefer using captcha rather than using sleep and till now it has proven to be an effective measure to prevent bruteforcing
It's effective but not user friendly.

I use it in a way that form displays captcha if you have wrong password 5 consecutive times and then again after 5 times. So it makes it secure and friendly
Good decision. I've seen it a lot that after one or two times you'll have to solve the captcha every single time which is highly annoying.

What's your Level of PHP? I am looking for a small team for my website

I'm currently busy with programming a RPG from scratch and also need to work on my penetration testing cms so I'm sorry to say I don't have spare time. :Frown:

RE: Login - zomgwtfbbq - 09-20-2014

(09-20-2014, 03:43 PM)hackarchives Wrote:
(09-20-2014, 01:23 PM)zomgwtfbbq Wrote:
(09-20-2014, 12:48 PM)hackarchives Wrote:
(09-19-2014, 06:11 PM)zomgwtfbbq Wrote:
(09-12-2014, 07:45 PM)hackarchives Wrote: I prefer using captcha rather than using sleep and till now it has proven to be an effective measure to prevent bruteforcing
It's effective but not user friendly.

I use it in a way that form displays captcha if you have wrong password 5 consecutive times and then again after 5 times. So it makes it secure and friendly
Good decision. I've seen it a lot that after one or two times you'll have to solve the captcha every single time which is highly annoying.

What's your Level of PHP? I am looking for a small team for my website

I'm currently busy with programming a RPG from scratch and also need to work on my penetration testing cms so I'm sorry to say I don't have spare time. :Frown:

RE: Login - CobraCode - 09-20-2014

As said above, you may want to look into 'PDO' and 'mysqli'.

PHP Code:
$pas = hash('sha256', mysql_real_escape_string($_POST['password'])); 

//You don't need hash(), and why escape a string when it's going to be encrypted?

$pas = sha1($_POST['password']);

//also, rather than using mysql_real_... make a handy function such as this one:

function clean($string)
{
    return htmlentities(mysql_real_escape_string($string));
} 

RE: Login - CobraCode - 09-20-2014

As said above, you may want to look into 'PDO' and 'mysqli'.

PHP Code:
$pas = hash('sha256', mysql_real_escape_string($_POST['password'])); 

//You don't need hash(), and why escape a string when it's going to be encrypted?

$pas = sha1($_POST['password']);

//also, rather than using mysql_real_... make a handy function such as this one:

function clean($string)
{
    return htmlentities(mysql_real_escape_string($string));
} 