Auth or Auth-HTTP???
| From: | rav k | Date: | Tue, 12 Dec 2006 15:24:10 +0000 |
| Subject: | Auth or Auth-HTTP??? | ||
| Groups: | php.pear.general | ||
| Request: | Send a blank email to pear-general+get-26077@lists.php.net to get a copy of this message | ||
I need to create a secure login page and I know of both Auth packages but Im still confused as to the practical differences between them, for instance is one of them more secure than the other? Can someone please recommend which one to go for as I would call myself a newbie and would just like to get through this with as little trouble as possible (I know thats not really possible lol..)
I have used sessions and cookies before in the past to store user info - does using Auth packages mean not having to use these?? Also what I did in my previous test version was to create a 'hash' field in my users table:
So each time a user logins Ok a random hash is generated and saved to a cookie and to the field. When they logout the cookie hash is set to 0 and expires. This is what I have been using to check if a user is logged in ok - ie. the cookie hash matches the field hash - would I still need to use this or does using Auth negate it????
Thanks for any advice :)
www.bitesoftware.com - software for a better lifestyle
_________________________________________________________________
Windows Live Messenger has arrived. Click here to download it for free! http://imagine-msn.com/messenger/launch80/?locale=en-gb