wat php security is..

[Eccentric]

needed for a usersystem login and register side at the moment. prefer a link to php.net somehwere if not ill still look

[awelsh]

umm well how big is the site your using it on? anything like credit card dets going through it?

[Eccentric]

not yet just need for login register page ATM!

[awelsh]

hmm well most probably, sessions would be better than cookies,

you could even encrypt the whole page, I used to have the site favourited but that was on my old pc just search something like php encryptor

[Dentafrice,]

hmm well most probably, sessions would be better than cookies,

you could even encrypt the whole page, I used to have the site favourited but that was on my old pc just search something like php encryptor

Why would you encrypt the whole page? No one gets to view the source code anyway.. so thats not a security risk.

If you use MySQL be sure to clean all inputed data and all $_GET's

[Agnostic Bear]

Why would you encrypt the whole page? No one gets to view the source code anyway.. so thats not a security risk.

If you use MySQL be sure to clean all inputed data and all $_GET's

and $_POST's never forget them

[Dentafrice,]

Why would you encrypt the whole page? No one gets to view the source code anyway.. so thats not a security risk.

If you use MySQL be sure to clean all inputed data and all $_GET's

[Eccentric]

Cheers caleb

[Invent]

class misc
{

    function clean($var)
    {
    
        $var = htmlspecialchars( $var, ENT_QUOTES );

        if( get_magic_quotes_gpc(   ) ) {
    
            $var = stripslashes( $var );
                    
        }
                
        $var = str_replace( "\"", "", $var );
        $var = htmlentities( $var );
        $var = mysql_real_escape_string( $var );
        
        return $var;
    
    }

} 

Simple thing I wrote up for Caleb in the quick reply box

Could use a few more cleaning functions though.

[Eccentric]

mysql_real_escape_string what does that do?
htmlentities what does that do?
get_magic_quotes_gpc and what does that do?

just want to learn thats all