Save Loginsystem

Chrizzzzz

Hi,

I tried a lot of different tutorials. After coding them i figured out how unsave they were.

Is there some kind of tutorial for a save (or almost save) user management system, like forums like this ok facebook,... use?

I tried this tutorial: http://www.phpbuilder.com/columns/tim20000505.php3?page=3
It seems pretty save to me, but i cant logg out... 🙁

Is there any hope?

Greetings,
Chris

bpat1434

Have you looked at HotScripts.com for some user management scripts? Have you looked at some Content Management Systems?

Chrizzzzz

bpat1434 wrote:
Have you looked at HotScripts.com for some user management scripts? Have you looked at some Content Management Systems?

Yeah i did, on hotscriptsare thousands of login and usermanagement scripts, but i dont wanna study each of those for figuring out that they are unsave...

Yeah, in the CMS Sysems like Joomla, Mamboo... its very hard to figure out what the right lines are, cause those scripts are so full...

Isn't there one that you can recoment? One that usesthe way all of the big systems are using like facebook, the phbb forums, this forum,...?

Greez
Chris

Chrizzzzz

i did but on hotscript are 1000 usermanagement scripts and i dont wanna study each of there to figure aout its not secure. can't u recoment one?

Im just looking for a login like the big ones use. Like in Facebook, in this forum or in phBB forums...

Chrizzzzz

I'm triing all the time, but all that i try are not that what i want.

Doesn't know anyone a good secure User-Management Tutorial for a system like every big system is using....

Greetings
Chris

bpat1434

Each forum uses its own system. So you can download the source and try to get the login stuff from phpBB, SMF, Phorum or whatever. Or you can just choose one from hotscripts.com.

There is no "one tutorial" that every system follows. The basics are like this:
- Users sign up using a form and some type of CAPTCHA
- Users choose their username and/or password initially
- Password is salted with something, password is encrypted
- User must validate using a random key via an Email link

That's the basics. You can look up each section individually and piece one together, or you can try and hack one from a running program.

Chrizzzzz

Hi,

I tried the last days to see how phpBB does it.

There is no way i could figure it out. The whole thing is so complex. All functions are splited over the whole Project (without any data ~11MB!).

Isn't there something like a tutorial that shows a save way like the big systems use? Even on hotscript are a lot 0815 systems programmed by not experienced developers that ere pretty unsave.

One that seemed pretty save to me was the Quadodo Login System, but the installation is not working, although everything is configrated right... and the code is not so well documentated and very split up. 🙁

Best Greetings
Chris