[+Haze]

Thanks for this tut. You know how to structure a thread to make it clear. Even if its not so "secure" as login i may use it for something else..

Thank you for being so willing to help!

Np dude. And here i've just finished the second tut.
https://hackforums.net/showthread.php?tid=4610080

And just slap in some PDO and secure the SQL statements and you'll be a whole lot more secure.

[Nikey646]

thats why ppl should use pdo over mysql\i

MySQLi is the "improved" version of MySQL, which includes Prepared statements.
Edit: MySQLi is also designed to be easy to switch too from MySQL_* functions, using either the classic Functions that everyone already knows, or using an OOP based structure.

PDO can still suffer from the exact same SQL Vulnerabilities from generic MySQL, but it's easier to use Prepared Statements then go through the trouble of executing the raw SQL statement with vulnerable data in it.

Both are secure, if you use Prepared Statements. Otherwise they suffer from the exact same problems as MySQL_* functions.

EG: http://php.net/manual/en/pdo.query.php
EG: http://php.net/manual/en/mysqli.query.php

[$lick]

Please for the love of god stop placing your brackets on a new line.

[Cornflower Blue இڿڰۣ-ڰۣ—]

"Makes a connection to the phpMyAdmin"

So the database you are using is a PhpMyAdmin database? Always thought PhpMyAdmin was just a editor.

---

Apart from the SQLi issue, this can also be cracked easier then Proton rat, just use a proxy server or even using the hosts file.

This is a okay tutorial, but I would not recommend using this, a beginner at cracking could crack this so easy also the database could be dumped with SQLi and you will leak everybodys usernames and passwords, and the passwords are in plain text so if the DB was dumped, you are rekt and e-rekt.

Second, you should also have a ID column in the DB, you should always have one.

---

You can also create accounts with the same username.

[+Haze]

SNIP

We then setup our SQL table. Which I will call 'tblLogin' which contains two columns. Username and Password for simplicity.

I know, I did that for simplicity, in real practice, I would of used another column called ID which would be our primary key which would also be an auto increment number. Or make the username the primary key..

I don't know if you know how to read but I clearly advised against using this, just used this as a concept.

And finally, I did this whole tut over night with no school, my thinking was iffy.

[Cornflower Blue இڿڰۣ-ڰۣ—]

I know, I did that for simplicity, in real practice, I would of used another column called ID which would be our primary key which would also be an auto increment number. Or make the username the primary key..

I don't know if you know how to read but I clearly advised against using this, just used this as a concept.

And finally, I did this whole tut over night with no school, my thinking was iffy.

So why did you make a low quality tutorial? Thought you was high quality man?

[+Haze]

So why did you make a low quality tutorial? Thought you was high quality man?

I did it for simplicity

I did it for simplicity

I did it for simplicity

and so far your the only one that thinks its LQ. But then again we both know how socially incompetent you are.

[Cornflower Blue இڿڰۣ-ڰۣ—]

and so far your the only one that thinks its LQ. But then again we both know how socially incompetent you are.

So you make a low quality tutorial for what? Rep? That perfetic.
If you are going to make a tutorial, atleast make a good HQ one. This is worse then what Only3 could do.

[+Haze]

So you make a low quality tutorial for what? Rep? That perfetic.
If you are going to make a tutorial, atleast make a good HQ one. This is worse then what Only3 could do.

if you go
https://hackforums.net/showthread.php?tid=4609552
you'll see a user requested that I made one.

🤝

[Cornflower Blue இڿڰۣ-ڰۣ—]

if you go
https://hackforums.net/showthread.php?tid=4609552
you'll see a user requested that I made one.

🤝

"If you are going to make a tutorial, atleast make a good HQ one. This is worse then what Only3 could do."

[Only3]

"If you are going to make a tutorial, atleast make a good HQ one. This is worse then what Only3 could do."

😁 i didnt made any tut ever 😏

[SIM-1456245]

Everything is good except the tutorial. Come on man, you use GET to send a password without a token, you insert non-escaped values into a SQL query. How worse can it be ?

[TRH4CK]

I already knew how to make this, but I learned something new, isNullOrWhiteSpace xD
Thanks for the tut :D

[+Haze]

Thanks TheHack. And Elotrolek, uhm PHP isn't really my strongest language. So yee. But like I said I've explained this in the thread.

By no mean do I recommend this as a secure method to handle a login, registration system. But this is merely a demonstration of the such a system would work. There are security holes in the code in this tutorial. But this should help beginners understand this concept. And should be used for learning purposes :)

[Cornflower Blue இڿڰۣ-ڰۣ—]

😁 i didnt made any tut ever 😏

That was the joke, this is worse then doing nothing, get it?