d2jsp
Log InRegister
d2jsp Forums > Off-Topic > Computers & IT > Programming & Development > I Need Help Making A Protected Website
Prev12
Add Reply New Topic New Poll
Member
Posts: 5,167
Joined: Nov 23 2006
Gold: 11.01
Sep 2 2015 04:54pm
Why would you post a question like this?

How are we supposed to help you if you don't know what you're using?

Can be done in PHP, JS (AJAX/ANGULARJS/other frameworks), JAVA, C#, and many more.

Tell us what language you're using and the requirements you need to meet. Can one user be logged into the website across multiple devices? Can they only be logged in for X amount of time? Do you want to let them cache/cookie their credentials?
Member
Posts: 688
Joined: Mar 29 2006
Gold: 1,402.77
Oct 8 2015 09:43pm
I don't think this guy realizes (well, he may not even care anymore) that you'll need dedicated hosting for the backend and likely a persistent database if he wants to accomplish this. This is not something you can just slap together with a quick tutorial, because at the very least you'll need to know the devops side of this as well.
Member
Posts: 10,736
Joined: Jul 16 2010
Gold: 12,490.00
Oct 23 2015 03:43am
Quote (Crispie @ Oct 8 2015 09:43pm)
I don't think this guy realizes (well, he may not even care anymore) that you'll need dedicated hosting for the backend and likely a persistent database if he wants to accomplish this. This is not something you can just slap together with a quick tutorial, because at the very least you'll need to know the devops side of this as well.


I'm still interested in figuring it out.

Thanks all.

On a side note after looking at Post #10 I wanted to clarify using Please Send Tell Acronyms (PST) incorrectly. That don't make no sense




Member
Posts: 32,925
Joined: Jul 23 2006
Gold: 3,804.50
Oct 23 2015 05:34pm
Quote (TFe_OT @ Oct 23 2015 05:43am)
I'm still interested in figuring it out.

Thanks all.

On a side note after looking at Post #10 I wanted to clarify using Please Send Tell Acronyms (PST) incorrectly. That don't make no sense


it's been 4 months...what did you still not figure out?
Member
Posts: 24,101
Joined: Nov 8 2007
Gold: 5,561.70
Oct 24 2015 09:31am
Quote (Crispie @ Oct 8 2015 11:43pm)
I don't think this guy realizes (well, he may not even care anymore) that you'll need dedicated hosting for the backend and likely a persistent database if he wants to accomplish this. This is not something you can just slap together with a quick tutorial, because at the very least you'll need to know the devops side of this as well.


Easy to host this in AWS free teir

E/ But yeah will probably need to know basic devops knowledge

This post was edited by lopelurag on Oct 24 2015 09:32am
Member
Posts: 161,550
Joined: Oct 18 2006
Gold: 4.03
Warn: 20%
Jan 15 2016 02:42am
don't use sessions for this single page rofl, use an auth script


Code
<?php
if (!isset($_SERVER['PHP_AUTH_USER'])) {
header('WWW-Authenticate: Basic realm="My Realm"');
header('HTTP/1.0 401 Unauthorized');
echo 'Text to send if user hits Cancel button';
exit;
} else {
echo "<p>Hello {$_SERVER['PHP_AUTH_USER']}.</p>";
echo "<p>You entered {$_SERVER['PHP_AUTH_PW']} as your password.</p>";
}
?>


This post was edited by GRATS on Jan 15 2016 02:46am
Member
Posts: 2,187
Joined: Mar 3 2013
Gold: 0.00
Jan 22 2016 07:51pm
you can use sessions, but you need to make sure it's secure. do not use plain text passwords, or passwords at all, use a token system and go from there. otherwise, you can use a simple script for logins, i.e. no cookies just temporary data.
make sure to hash and salt the passwords and other sensitive information. also you might want to look into mysql injection, http headers, CSRF attacks, and XSS.

if you're using php 7.0 it has alot of built in features to protect against these things, i.e. PDO objects, built in sanitation handling, etc...
Go Back To Programming & Development Topic List
Prev12
Add Reply New Topic New Poll