Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #14263

Re: Php login/registration page

Show all headers | View raw

On 10/1/14, 8:13 AM, Jerry Stuckle wrote:
> On 9/30/2014 11:33 PM, Richard Damon wrote:
>> On 9/30/14, 8:55 PM, Jerry Stuckle wrote:
>>> On 9/30/2014 7:04 PM, Apple Sizat wrote:
>>>> Can anyone explain how i can create a registration and login page
>>>> using PHP that doesnt use databases, sessions, or cookies?
>>>>
>>>> Is there a tutorial someone can point me to or could anyone tell me
>>>> the method. Thanks
>>>>
>>>
>>> You can do it not using a database (i.e. use a flat file).  But if you
>>> don't use cookies and/or sessions, the login will only be active for the
>>> current request.  It will be forgotten as soon as the PHP script ends
>>> (which is before the last data is sent to the client).
>>>
>>
>> You could add a token to every URL link to leave the page to go to the
>> next page, that provides storage for the login information, as long as
>> the user navigates via links on your pages.
>>
>> This could be seen as a version of a "poor mans" session (implementing
>> by hand what session code can take care of automatically).
>
> If you aren't storing any information on the server, it has to be more
> than a token.  It must contain all of the necessary information - which,
> as J.O. indicated, makes it very easy to hijack.
>
> You could also use hidden fields in the page to store information, but
> that has the same problem.  Additionally, since the data are coming from
> the user, they can't be trusted.
>
> That's the whole reason sessions exist.
>

He didn't SAY he couldn't store anything on the server, and it would be 
a bit hard to understand a "registration page" that didn't save 
something somehow on the server. He just said he couldn't (or doesn't 
want to use) databases, sessions, and cookies.

Jerry had already pointed out an alternative to the Database, I was just 
pointing out that it is possible to create something like a cookieless 
session via other means.

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Php login/registration page Apple Sizat <afor6993@gmail.com> - 2014-09-30 16:04 -0700
  Re: Php login/registration page Jerry Stuckle <jstucklex@attglobal.net> - 2014-09-30 20:55 -0400
    Re: Php login/registration page Richard Damon <Richard@Damon-Family.org> - 2014-09-30 23:33 -0400
      Re: Php login/registration page "J.O. Aho" <user@example.net> - 2014-10-01 06:51 +0200
      Re: Php login/registration page Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-01 08:13 -0400
        Re: Php login/registration page Richard Damon <Richard@Damon-Family.org> - 2014-10-01 22:37 -0400
        Re: Php login/registration page GS <nomail@nospam.org.invalid> - 2014-10-03 01:38 +0000
          Re: Php login/registration page Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-02 21:43 -0400
          Re: Php login/registration page Denis McMahon <denismfmcmahon@gmail.com> - 2014-10-03 03:29 +0000
            Re: Php login/registration page Matthew Carter <m@ahungry.com> - 2014-10-03 00:24 -0400
              Re: Php login/registration page Denis McMahon <denismfmcmahon@gmail.com> - 2014-10-03 18:33 +0000
                Re: Php login/registration page Matthew Carter <m@ahungry.com> - 2014-10-03 16:16 -0400
                Re: Php login/registration page Ed Mullen <ejEVOMER@edmullen.net> - 2014-10-03 18:24 -0500
                Re: Php login/registration page Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-03 20:37 -0400
  Re: Php login/registration page Michael Vilain <vilain@NOspamcop.net> - 2014-09-30 18:38 -0700
  Re: Php login/registration page gordonb.opkrz@burditt.org (Gordon Burditt) - 2014-09-30 21:08 -0500

csiph-web