简单的PHP登录 - 使用的安全方法

Question

I'm currently attempting to create a simple CMS (really simple). It won't use database, but static html files. I managed to create a php file that updates those files using form Post. Now I want to hide it using a really simple login screen. I found this method which basically shows either the specific php page or the login screen.

My problem is I'm a noob in php, managing to build stuff through trial and error, and I'm dead scary of this method not being minimally safe.

I don't know much about this function, but shouldn't the login function have some sort of trim?

Thanks in advance...

Answer 1

The login form you linked would offer a very basic level of security such that someone couldn't simply navigate to the page. If you're new to developing I would spend just as much time looking at the security implications of the code you write as the functionality. There are many things you need to consider.