[flexcoders] Re: Secure Login

2008-04-25 Thread Dmitri Girski
Hi, I think that the simplest back-end is a PHP with session handling. On the client side you shouldn't do anything as browsers deal with sessions. Start reading from here: http://au.php.net/manual/en/book.session.php The idea is that server should ask browser to start a session for every

[flexcoders] Re: Secure Login

2008-04-23 Thread andrewwestberg
If your project is small, just talk to an https server and send password hashes (MD5 or stronger) across the wire to match to a DB stored hash. Pretty much any backend can do this. If you have a large project, or more stringent requirements for usage tracking and such, look into nitrolm.com