How to create secure login in php with mtsql,session,cookie

[emm]

I am very new to programming language things. In php, mysql etc. To start my learning I want to start with creating a log in script. That will verify users from a member database. Keep track of the users on every page of the website. It has to be as secure as possible. Can anyone help me with a guideline and code on how can I go ahead with this?

Thank you for your time.
_________________
“You might say reality is the result of complex negotiations between the observer and the observed. But that is simply a point of view…”
Digital Bangladesh

[dinangkur]

Very interesting. As I was discussing this topic with my beloved Quantum , there are different security option to think about.

1. Check IP
2. Session Cokie
3. Image Authentication
4. Encrypt Data in database field
5. Giving access to google bot, MSN bot, when they visit the webpage for listing, don't generate session ID, cause they just ignore session ID string as it's not a static information
6. Some computer don't allow cokie and how to drop cokie at that moment and what could be other option.

If there are other security thingy need to be mentioned, please do.

-DK

p.s. when we fill the major security option, then we can go for code.
_________________
...we too are stardust...

[hasnut]

I think you shoud start learning PHP and mysql. If you alllready know thoes than its should not be a problem for you.

Start your self we will help when you stuck. I think this way you will learn something.

By the way if you still want readymade code then you can see any portal scripts out the world
_________________
Sarder Hasnut
MCSD, CIW A

Need Low Cost Prefessional Hosting Contact me

[quantum]

I think, that's a very good idea. I will help you emm. Start working on it. We can build a open source secure log in module here with everyone else. Let me come back to this later.
_________________

Dust fills my eyes / Clouds roll by / and I roll with them / Centuries cry / Orders fly / and I fall again
Afford best design, implement best solution. Outsource your web design.

[dude]

I agree that it will be a good thing if we can write a secure open source log in and session tracking script that everyone can simply plug into their current system.