Re: [PHP] [Fwd] How to make a secured login form

2009-02-14 Thread German Geek
Have a look at my post called "for the security minded web developer - secure way to login?". It seems like a similar idea with less overhead. Regards, Tim Tim-Hinnerk Heuer http://www.ihostnz.com Joan Rivers - "Never floss with a stranger." 2009/2/14 Virgilio Quilario > > I have secured the

Re: [PHP] [Fwd] How to make a secured login form

2009-02-13 Thread Virgilio Quilario
> I have secured the login form for my CMS with a challenge-response thing > that encrypts both username and password with the > (login-attempts-counted) challenge (and; here's my problem: a system > hash) sent by the server (it would end up in your html as a hidden > inputs, or as part of a json t

[PHP] [Fwd] How to make a secured login form

2009-02-13 Thread Rene Veerman
Hi, I'm cross-posting this (from jquery-en js mailinglist) because it's something that i think is relevant for this list too.. You can ignore the jQuery in it, since all the jquery calls can be replaced with document.getElementById(). I have secured the login form for my CMS with a challe