Re: [PHP] Best authentication system

2011-06-05 Thread Richard Quadling
On 4 June 2011 23:21, Sean Greenslade  wrote:
> IIRC, there is a google code project for a php login system. You might want
> to check it out.

http://code.google.com/p/loginsystem-rd/

"Login system to prevent XSS, SQL Injection and CSRF"


May be of interest.

-- 
Richard Quadling
Twitter : EE : Zend : PHPDoc
@RQuadling : e-e.com/M_248814.html : bit.ly/9O8vFY : bit.ly/lFnVea

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Best authentication system

2011-06-04 Thread Eric Butera
On Sat, Jun 4, 2011 at 2:44 PM, Adam Tong  wrote:
> Hi,
>
> I'm running a site for which I need an authentication system. I have
> already my own (that is too simplistic and not very secure).
> I want some advice here. I checked PEAR, but as there are several
> options there, I was not sure which one to choose. Here are my needs:
>
> - Some sections of the site cannot be accessed if the user does not
> have an account (at least login and password)
> - There are 2 type of users at this moment, depending on that type,
> the user can access some sections and not the others (the ones allowed
> for the other type). Maybe in the future there will be more types of
> users.
>
> Thank you
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>

Hello,

There is terminology in place for what you're trying describe.  First
take authentication, the ability to log into a system.  Second would
be authorization, the abilities a user has.  With these terms you can
do some further research on the subject.

For reference in a lot of projects for authentication I use
Zend_Auth[1] and for authorization I use Zend_Acl[2].  Hopefully
linking to them will not contribute to further confusion.

1. http://framework.zend.com/manual/en/zend.auth.html
2. http://framework.zend.com/manual/en/zend.acl.html

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Best authentication system

2011-06-04 Thread Sean Greenslade
IIRC, there is a google code project for a php login system. You might want
to check it out.
On Jun 4, 2011 2:46 PM, "Adam Tong"  wrote:
> Hi,
>
> I'm running a site for which I need an authentication system. I have
> already my own (that is too simplistic and not very secure).
> I want some advice here. I checked PEAR, but as there are several
> options there, I was not sure which one to choose. Here are my needs:
>
> - Some sections of the site cannot be accessed if the user does not
> have an account (at least login and password)
> - There are 2 type of users at this moment, depending on that type,
> the user can access some sections and not the others (the ones allowed
> for the other type). Maybe in the future there will be more types of
> users.
>
> Thank you
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>


[PHP] Best authentication system

2011-06-04 Thread Adam Tong
Hi,

I'm running a site for which I need an authentication system. I have
already my own (that is too simplistic and not very secure).
I want some advice here. I checked PEAR, but as there are several
options there, I was not sure which one to choose. Here are my needs:

- Some sections of the site cannot be accessed if the user does not
have an account (at least login and password)
- There are 2 type of users at this moment, depending on that type,
the user can access some sections and not the others (the ones allowed
for the other type). Maybe in the future there will be more types of
users.

Thank you

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php