Re: [PHP] Back to security

2007-03-13 Thread Jon Anderson
jekillen wrote: For what it is worth, I am only aware of one drawback to https with respect to how requests are handled that makes it difficult to use with virtual hosting. I am a little hazy on how it works but when https is used only the ip address of the request is available to the server bef

Re: [PHP] Back to security

2007-03-13 Thread jekillen
On Mar 12, 2007, at 3:32 PM, Richard Lynch wrote: On Sat, March 10, 2007 12:41 pm, Alain Roger wrote: I'm continuing to work on securing my administration part of the website. based on previous posts and reading materials, I was thinking to use the following process : Think of HTTPS as like

Re: [PHP] Back to security

2007-03-12 Thread Richard Lynch
On Sat, March 10, 2007 12:41 pm, Alain Roger wrote: > I'm continuing to work on securing my administration part of the > website. > based on previous posts and reading materials, I was thinking to use > the > following process : Think of HTTPS as like a bank vault in the basement of a branch bank.

Re: [PHP] Back to security

2007-03-10 Thread Steve Edberg
At 6:47 PM +0100 3/10/07, Tijnema ! <[EMAIL PROTECTED]> wrote: On 3/10/07, Alain Roger <[EMAIL PROTECTED]> wrote: Hi, I'm continuing to work on securing my administration part of the website. based on previous posts and reading materials, I was thinking to use the following process : 1. user

Re: [PHP] Back to security

2007-03-10 Thread Tijnema !
On 3/10/07, Alain Roger <[EMAIL PROTECTED]> wrote: Hi, I'm continuing to work on securing my administration part of the website. based on previous posts and reading materials, I was thinking to use the following process : 1. user has to logon through a standard "http://"; web page 2. login and

[PHP] Back to security

2007-03-10 Thread Alain Roger
Hi, I'm continuing to work on securing my administration part of the website. based on previous posts and reading materials, I was thinking to use the following process : 1. user has to logon through a standard "http://"; web page 2. login and encrypted password are compared with what is stored