RE: [PHP-DB] Definitive answer for large scale registration/authentication
| From: | Peter Lovatt | Date: | Tue, 16 Apr 2002 16:44:07 +0000 |
| Subject: | RE: [PHP-DB] Definitive answer for large scale registration/authentication | ||
| References: | 1 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-18558@lists.php.net to get a copy of this message | ||
hi
Depends a little on what you are doing next.
I am not an htaccess expert so this is written as a 'sessions' user, but if
you use a database/session system you have a lot of flexibility, and can log
what users are up to.
If it is well programmed, with security in mind you can make it very secure
too. Things like lockout after 3 failed logins, site admins without any
authority on the system itself , users with different authorities within the
software etc etc.
On the other hand if you just want a simple restricted area perhaps htaccess
is best
just my 2p worth
Peter
-----------------------------------------------
Excellence in internet and open source software
-----------------------------------------------
Sunmaia
www.sunmaia.net
info@sunmaia.net
tel. 0121-242-1473
-----------------------------------------------
> -----Original Message-----
> From: Brad Hubbard [mailto:brad@congosystems.com]
> Sent: 16 April 2002 02:48
> To: php-general@lists.php.net
> Cc: php-db@lists.php.net
> Subject: [PHP-DB] Definitive answer for large scale
> registration/authentication
>
>
> Can I get some feedback on the conventional wisdom as to the best
> solution
> for high volume registration and authentication of users
> accessing a secure
> site? I have worked before with database/session based methods as well as
> htaccess. Which is preferred? Are there alternatives?
>
> Thanks for the feedback,
> Brad
>
> --
> PHP Database Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>