Create Login Page in PHP and MySQL with Session

[manoj2010]

hello ,
I coded a pretty basic but highly functional login/logout mechanism in PHP and Mysql with session. I thought it will be very good for beginner.

also you can understand how it will work
i assured you will enjoy ,
if any issue please share with comments
here is the link : coding-trick.blogspot.in/2014/10/create-login-page-in-php-and-mysql-with.html

 

[Tia Wood]

Good start. Just a few things I spot:

• $_SESSION['IsLogin'] - if the user just loaded the page for the first time this might not be set right away even if they are truly logged in. So you need something that happens if $_SESSION['IsLogin'] is null.
  
• $_SESSION['IsLogin']="Yes" is not a secure way to validate if a user has really logged in and who they are.
  
• The password should never be stored as plain text in the database.

 

[N-A]

This is borderline spam as you could have used the insert code function to display PHP and provide the same tutorial without link dropping, though I don't see your ads covering the page, so will not act as of now. It looks like a pretty good start for someone to learn sessions though (but be a little more careful and read the rules).

<?php echo md5("Thank you Tia"); ?>

 

[manoj2010]

Good start. Just a few things I spot:

• $_SESSION['IsLogin'] - if the user just loaded the page for the first time this might not be set right away even if they are truly logged in. So you need something that happens if $_SESSION['IsLogin'] is null.
  
• $_SESSION['IsLogin']="Yes" is not a secure way to validate if a user has really logged in and who they are.
  
• The password should never be stored as plain text in the database.

Thank you for your valuable comment , i will take care this

 

[Kate]

Also, for increased security, I would use the session_regenerate_id function in order to thwart session fixation attacks.