Re: [PHP] Need secure login

2003-10-09 Thread Justin French
On Friday, October 10, 2003, at 12:38 PM, Manisha Sathe wrote: Thanks Justin, actually I was also thinking of the same, but just wanted to confirm that it is really not a good idea. Was also wondering if there is any third party solution ?. A third party solution to what??? I've described the

Re: [PHP] Need secure login

2003-10-09 Thread Mike Migurski
>Thanks Justin, actually I was also thinking of the same, but just wanted >to confirm that it is really not a good idea. > >Was also wondering if there is any third party solution ?. A third-party solution to a bad idea? - michal

Re: [PHP] Need secure login

2003-10-09 Thread Manisha Sathe
Thanks Justin, actually I was also thinking of the same, but just wanted to confirm that it is really not a good idea. Was also wondering if there is any third party solution ?. Regards Manisha "Justin French" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > This first rule is neve

Re: [PHP] Need secure login

2003-10-09 Thread Justin French
This first rule is never trust the client-side. The second rule is never trust the client-side. This means that relying on... a) the user accepting the cookie b) the user always using the same computer c) the user not deleting the cookie ... is a BAD idea. Frankly, if you force me to use a single c

[PHP] Need secure login

2003-10-09 Thread Manisha Sathe
Hi, I have a client. He does not want member login by just giving password and login id. He says anybody can give this info to his friend and his friend can access the site. One way is to make use of cookie on his computer. So only from one computer he can access the site. But the thing is that u