having user name password system and hiding the password...

Homer_simpson · **Posted:** Fri Aug 01, 2003 9:06 pm

well u know that when some1 signs in with their username and password the url will change to this:
http://blah.com/blah.php?username=homer&password=homerpassword

but that is too obvious and who ever looks at the url will know what the password is... how can i hide the password or turn it into some sorta code?

Amailer · **Posted:** Fri Aug 01, 2003 9:16 pm

Crypt,
You could use that...
http://ca2.php.net/manual/en/function.crypt.php

But you shoudl always for safty reasons Encrypt the password.
You have a login form, with username and password.

The form posts to: login.php
and in there it does this...

(remember in the database...the password is already encrypted)

code:

$query = "SELECT username FROM LOGIN_TABLE
WHERE username = '$userid'
AND user_password = md5('$password') ";
$result = mysql_query($query);

the md5();
encrypts the password given from the login form :/
And matches the encrypted password with the encrypted password in the mysql TABLE 'LOGIN_TABLE' and FIELD 'user_password'

Basicaly...what you can do is... when sendign the URL.. and getting it checked by a session. You can do this.

code:

$password = mb5($user_password);

echo "<a href=\"login.php?user_password=$password\"> err..what ?! </a>";

:p