什么是PHP中良好的用户登录概念？

Question

Currently after successful login I add md5($username) md5($password) in cookies and then every time user browser the site on every page a functions validate these cookies to database.

Its working nicely I am happy with it. But is there any thing better i can do?

Answer 1

It good that you are using md5 but PHP also has other option that you can exploit for better security

There is a post here : Login cookies security where i explained in details securing PHP Cookies

You can also see : http://www.phpclasses.org/browse/file/25025.html .. a simple class all you need to do is replace the encryption with a strong one such has RSA or DES

If you nee more information you can just add a comment

Thanks :)