26707Securing PHP Files using HTTP Authenticationhttp://www.phpnerds.com/article/securing-php-files-using-http-authenticationUsually this form of authentication is called Apache HTTP Authentication as it is only available for Apache based web server. To be honest, that is a lie as it is also possible with Microsoft's IIS web server, however, is much more difficult to implement and requires many configuration changes in order for it to run successfully. Hence, we will only focus on getting this working under Apache.PHP > Tips and Tutorials > User AuthenticationOct 16, 2006Peter McNulty
Learn how to generate random passwords that are highly secure and extremely difficult to crack. However you can choose between various complexity/strength and you can set password length as well.
In order for an online store to keep track of what's in whose shopping trolley, the system needs to know which user is making specific requests. After users log in, they would get lost amongst all the other users if you didn't keep track of their session. By assigning a unique value to this user, the system can know who it is without having them log in on every page
Sometimes you need to add an extra protection to password-protected website. This article explains how access to the login page can be restricted after three unsuccessful login attempts. This schema uses visitors IP address to store log attempts in the database and block access to login feature for 30 minutes after third unsuccessful attempt.
One cool thing about php is that you can fairly easily validate users before displaying content on a page by page basis. Let's say you don't want to restrict the entire directory using htaccess, this is a neat alternative. Let's create a login system using PHP and mySQL. First we need to create the table that holds our user data. We're going to have 3 fields, logged, which will keep track of the last time a person logged in to the page, user and pass which will be the username and password respectively. Using Telnet you can simply cut and paste this into your mySQL monitor. If you need help with how to log into the mySQL monitor then see the diary entry on connecting to mySQL.
Joining mailing list will entitle you
to receive occasional emails informing you of news and
updates to the site and any special offers that may be
of interest to you.