Re: [PHP] Best way to store login data?

2002-06-14 Thread Pradeep Dsouza

Hi 

I would suggest you use a DB for the logins 
and use the id 

Avoid using cookies use sessions that way u have nothing 
on the client end 

Pradeep 



- Original Message - 
From: "Leif K-Brooks" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, June 15, 2002 10:39 AM
Subject: [PHP] Best way to store login data?


> I have a site with logins.  I am planning to recode logins soon (right 
> now the username and password are stored in cookies with no encoding). 
>  In your opinion, which of these is a better idea:
> 1. Storing in two cookies with md5 encoding for the password
> 2. Use sessions
> 3. Store logins in a database, and put an id from there into a cookie
> 
> 
> -- 
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
> 


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] Best way to store login data?

2002-06-14 Thread SenthilVelavan

Hello Leif,
My opinion is
1.First do md5 encoding for passwords.
2.Store the username and encoded passwords in database as well as in two
cookies.
Note:But storing the passwords in a cookie is a security issue.

regards,
SenthilVelavan.P,
KovaiTeam Softwares.


- Original Message -
From: "Leif K-Brooks" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, June 15, 2002 10:39 AM
Subject: [PHP] Best way to store login data?


> I have a site with logins.  I am planning to recode logins soon (right
> now the username and password are stored in cookies with no encoding).
>  In your opinion, which of these is a better idea:
> 1. Storing in two cookies with md5 encoding for the password
> 2. Use sessions
> 3. Store logins in a database, and put an id from there into a cookie
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php