Password only authentication in PHP/mySQL -
is possible authenticate user in php/mysql without requiring them input username password?
i created login authentication in dreamweaver checks users names against passwords in mysql works great! however, boss doesn't want user have type in name. wants them have put in unique code have name displayed on success page.
i thought perhaps hide username input box , have populate itself... done recordset maybe?
if possible show me how appreciate it, thank :)
the best practice of authentication have minimum of 2 things need remember when want login. when server shows login challenge username , password, possible hacker need figure out 2 strings of data. when use password make easy hack application. can use token-based authentication. ask boss likes most. user can create own token via phone or other device logged in. have login once create token login on intranet / website.
when want use password, sure can find in database. because encryption algoritmes can't reversed. can't "un"-hash password checking purposes.
when use token based authentication, can create application users logs in. every x minutes (something 5 or 10) token expires , needs create one. every time creates code can add in database relate user / useraccount.
when use password authentication user a) can hacked because thing hacker needs know. , bad luck 2 users can use same password. solution can't without plain-text passwords or insecure reversible password encryption check if password correct , related user.
but answer question.
yes possible.
no isn't safe
no isn't best practice
Comments
Post a Comment