Admin page

[unknowngiver]

Hey
can anyone gime the MOST secure admin page...i dont care if it uses mysql..but it has to be the MOST SECURE one...the script or a tutorial tht teachs u how to make it will be cool
Thanks

 

[user-7256]

I'm afraid there is no MOST SECURE one for download, especially for a non-common purpose such as a custom site, in comparison to Invision Board, for example. ... meaning you won't find a good, secure one for download.

The basics to PHP security are to find good, expensive hosts that have the ultamite firewalls, etc.

The second step is YOUR job with the PHP.

I just recently wrote the most secure admin protected pages and login that I've ever done. It doesn't use MySQL to store the pwds since only I will be accessing it, but some good advice...

use SSL. This costs more $$$.
encrypt passwords two or three times. I encrypt my already-"encrypted" md5 with crypt(). This takes longer but is more secure.
use plenty of protection amongst admin pages, and ALWAYS be sure to secure against sql injection. I recommend using Axilant's script (in CODE forum) and use plenty of cookies, session variables, and even write your own logs.

One of the neat security features of one of my sites is that upon a detected or sensed security breach, it shuts down the entire site from user access, notifies me by e-mail, blocks ALL ip addresses but mine, ONLY allows Firefox browser, changes my admin password and sends an encrypted email to me of the new password, only lets ME login to the admin panel from MY computer with MY browser.

Plus some.

Hope I've helped,
cheers,
-Matt

 

[unknowngiver]

Thanks
but the problem is tht i know almost nothing abt php..i m a beginner so i cant really code it from scratch unless i am reading a tutorial tht teachs u step by step...

basically i have this folder wid small scripts tht can be used to edit my website from anywhere...n i want to make tht folder restricted 2 me only so only I can acess it.. by using a password or w.e

 

[user-7256]

Oh.

In the CODE forum, check out my "Fully Functional Members Script" and you'll get some idea