good password protection

brainlag

I need a good password protection script. I can use MySQL, so that's not a problem. I was going to use .htaccess to protect my pages, but GOdaddy doesn't let Apache handle PHP, so none of my PHP files were protected.

I was recommened DF Black Gate , but when I try to downlaod the latest version, the file is corrupt.

If anyone has or knows of a good password script that isn't too difficult to use, I'd love to lhave some suggestions.

BTW. I only want it to protect a few webpages or a single directory, I don't need a lot of users or anything like that. Simple is better, but not at the expense of security.

Kudose

I have a pretty salted and keyed password encryption script. I can share it with you if you'd like.

brainlag

I really don't know what that means, but it sounds good. 😃

Anything that will assist in my securing php pages is a good thing.

Kudose

webmaster at spechal dot com

email me

Arc

sessions are the best way to password protect pages and are very simple to impliment.

brainlag

I think I found a good one. I found it while looking at PHP scripts. I assuem it's a "session" script, since there is a "session_start();" in the code. There are several files associated with this script, but I think this is the most important file.

I made my own "verify.php" page and added a few lines to echo the user's IP. Is there a way to get this script to log IPs if logon fails?

<?php
	$username = $_POST['username'];
	$password = $_POST['password'];
	$url = "user.php";

$user_array = array("USERNAMEHERE");
$pass_array = array("PA\$\$WORDHERE");
$user_length = count( $user_array );

for ( $i = 0; $i < $user_length; $i++ )
{
	if ( $username == $user_array[$i] && $password == $pass_array[$i] )
	{

		session_register("user");
		session_register("loggedIn");
		$_SESSION['user'] = $username;
		$_SESSION['loggedIn'] = "true";

		header("Location: $url");
	}
}

//I added everything below this line.  

    echo '<center><br><img src="IMAGEURLHEREf"><br><br><font size=7><b>!ACCESS DENIED!</font></b><br></center>';
    echo "<center><b><font size=7><font color=\"CC0000\">$REMOTE_ADDR";
?>