Secure Login, Need Help...

[withhisstripes]

Heya,
I need help creating a secure login for a website. Can anyone point me to
some good resources? I know how to make a basic HTML login, but I'm unsure of
how secure it actually is. By the way, what DEFINES 'secure' exactly? And if
you have a script that isn't particularly 'secure' than what kind of people can
get in and how?

I know that's a lot of newbe questions, but humor me please!
Thanks

[TPK]

Are you using a scripting language such as ASP and is there a database
connection?

What I have done in the past is had a database that contains the user login
and password information in a table. A standard login page is built that then
queries the database table where the user and password information is held. If
the login information matches the user is passed in, if not a generic "No
Access" statement is displayed.

If the site allows users to create their own accounts a similar approach is
used. In this case there is a scripted page with a form. The form is filled out
and submitted to a database. The form contains fields that are mapped to the
database. (You can also put restrictions on the type of data placed in the
fields so users don't do things like entering words in a date field.) When the
form is successfully submitted a new record is created in the database, with
corresponding fields filled out in the database table.

I believe there is also a way to access Active Directory in this manner, but I
have never done this.

TPK

[withhisstripes]

Hey,
Thanks for the reply! I've never used ASP but I'm a quick learner. I have
not created a database to be connected to, I understand the concept, but I've
never done it. I'm really starting from scratch on this one.
Currently, I only need to know how to create a secure login that I have
administrative rights, but if you have the time and resources, I would prefer
to learn how to create a site that users can create they're own logins in. But
the most important thing is that this login is secure, because I know how to
make a login that will do the job, I just don't know how secure it is.

[Paul Booth]

try here [url]http://www.Webthang.co.uk[/url]