UserFriendly Strip Comments


	The Daily Static UF Archives Register UF Membership Ad Free Site Postcards Community Geekfinder UFie Gear Advertise on UF Forum Rules & FAQ Username Password Create a New Account

Back to UserFriendly Strip Comments Index

secure web login	by dennismv	2007-12-26 11:47:50
No.	by CynicalRyan	2007-12-26 13:44:39
The connection is not encrypted; depending on how the username and password are transmitted (POST or GET? Secure connection?), you have different angles of attack. A cookie can be hijacked, via XSS, or a trojan or what ever. Just use a session id, if you have to (if you want it unhackable, login the user during inactivity, and disallow "remember me" stuff), and store the session id in a cookie, not the user ID and definitely not the password.
[ Reply ]

[Todays Cartoon Discussion] [News Index]

Come get yer ARS (Account Registration System) Source Code here!
All images, characters, content and text are copyrighted and trademarks of J.D. Frazer except where other ownership applies. Don't do bad things, we have lawyers.
UserFriendly.Org and its operators are not liable for comments or content posted by its visitors, and will cheerfully assist the lawful authorities in hunting down script-kiddies, spammers and other net scum. And if you're really bad, we'll call your mom. (We're not kidding, we've done it before.)