Security

Whin i submit this form, the username and password is visible in firebug…
How do i hide my password ?

This is my login.php

[code]

Sign in [/code]

You should use SSL (HTTPS) when handling sensitive data. Note that this also includes the cookies (like the session cookie) after a user is authenticated. Using SSL you can rest assured the data is transferred encrypted from the client to the server :slight_smile:

There are addional measures that could be taken if you want a zero-knowledge system (system never sees the username/password), but that is probably not applicable here.

Thanks, But How???

Setting up SSL depends on your hosting situation. I would suggest contacting them :slight_smile:

After you have it working (can access your site through https) you can just either force all users to always use https, or you can only do it for login + logged in users.

Thanks :slight_smile:

Sponsor our Newsletter | Privacy Policy | Terms of Service