Reply to thread

Message

<blockquote data-quote="Damien" data-source="post: 415765" data-attributes="member: 72299">1) Double authentication stops users from accessing housekeeping after they've been fired/demoted. They'll retain their rank till the session ends, this way it provided an extra layer of protection before they can access the ASE. One way to solve this is to do a rank check when the user hits the ASE, then the login wouldn't be needed.2) There is nothing wrong with his queries. Whilst my_sql is deprecated, it can still be used safely and securely.. like he's doing. He's filtering the information before it gets used in the query, so people wont be able exploit it.[CODE]public function password($data){&nbsp; &nbsp; if($data == NULL)&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; return $this-&gt;error_Handler('Validate Data','The given data could not be validated.');&nbsp; &nbsp; }&nbsp; &nbsp; else&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; return password_hash($data, PASSWORD_BCRYPT, array('cost' =&gt; 12));&nbsp; &nbsp; }}[/CODE]</blockquote>

[QUOTE="Damien, post: 415765, member: 72299"] 1) Double authentication stops users from accessing housekeeping after they've been fired/demoted. They'll retain their rank till the session ends, this way it provided an extra layer of protection before they can access the ASE. One way to solve this is to do a rank check when the user hits the ASE, then the login wouldn't be needed. 2) There is nothing wrong with his queries. Whilst my_sql is deprecated, it can still be used safely and securely.. like he's doing. He's filtering the information before it gets used in the query, so people wont be able exploit it. [CODE] public function password($data) { if($data == NULL) { return $this->error_Handler('Validate Data','The given data could not be validated.'); } else { return password_hash($data, PASSWORD_BCRYPT, array('cost' => 12)); } } [/CODE] [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members