Reply to thread

Message: <blockquote data-quote="MayoMayn" data-source="post: 390345" data-attributes="member: 71840">Hey man, what you should consider doing instead, would be using their password functions: password_verify() and password_hash(). And well, consider cleaning the shit up, because there's a lot of unneeded coding inside there. Aswell as all CMS contain deprecated mysql_. mysqli a must, bit pdo is the shit. It's also easy to fraud and fake a user through sessioning. When the user gets logged in, it sets sessions from the users table in db, BUT there's none sort of authentication key, like match against password. It's so dann unbreachable.Sent from my SM-G928F using Tapatalk</blockquote>