Create a PHP Forum Pt 5

I show you how to create a proper login system. It is multi-layered and very secure. I specifically cover how to:

* Secure against code injection and session hijacking
* Change page elements based off of login status
* Verify login status with cookies and sessions
* Create a small compact captcha system
* Search the database to verify identity and make changes to the data

And, a whole bunch more.

[derekbanas]

I do my best to answer all questions. Always feel free to ask. I'll help if I can :)

[derekbanas]

@Boudabang Thank you! Thanks for taking the time to express your appreciation :)

[derekbanas]

@adalpilscaza Thanks I record with QuickTime x and edit with iMovie. It's all super cheap stuff that came with my computer

[derekbanas]

@adalpilscaza Yes, I could never do what I do with a PC. It really is extremely simple and cheap.

[megarocky]

great tutorial however I have few questions

1. Is there any particular reason that you put the form validation code before body section of HTML?
2. When and how does the session expire? I thought that after closing the browser the session would be destroyed, however it still alive.
3. Related to the second question, how do you implement the remember me functionality (where a user through checkbox can select it whether he wants to be remembered on that pc or not )?

thanks again

[derekbanas]

I'm guessing the error is in the database setup. That is where other errors occurred with this tutorial. Make sure the password is big enough in the db

[antedrome]

Thanks for the quick reply, it was really unexpected :) I'll definitely check that out then...

[antedrome]

Hey Derek! If there's any chance you're reading this I wonder if you can help. How can you achieve Gmail/Facebook/Youtube-like dynamism when you're building a message board? As I'm typing in my comment here, there's a counter right below the box that tells me how many characters I have left and after I post it, the page is not reloaded, only the comment section reorganizes itself. So what is the magic behind this? And is it possible to achieve this level of dynamism in a message board?

[douglasg]

The ZIP file you posted has extra files that aren't used in msgbrd example... there is a login.php and a mblogin.php. I am using the mblogin.php. I can NOT get a valid login to valid its failing at the buttom of the Submit IF No Matches found but the users are valid.. Could the ELSE be there in error ? It seems to clear the other loops. Is the mblogin.php the correct file? ALSO .. IF file has the input boxes messages and comments? Thanks in Advance!

[derekbanas]

Check out my jquery tutorials. I cover how to easily change a site dynamically there. It is actually pretty easy. Jquery is awesome. The hardest thing about making a site like Facebook is securing it. Everything else is pretty easy