griimnak
You're a slave to the money then you die
please move this thread if it's in the wrong section
Been working on my personal cms for awhile and i managed to finish some pretty unique features.
Don't take that warning message so lightly, it actualy means what it says.
Cross-site request forgery is often forgotten when developers write their code, so i made sure i'm protected against it.
there will be a hidden token generated every instance of the page load. if a request is made and this token is changed at all, it will stop the request and log the ip etc into the database.
Since this is an admin panel, i'm going to log failed login attempts aswell.
The ability to ban certain ip addresses is also done
maintenance is also finished
I'm also using prepared statements to ensure i'm protected from sql injections.
Thoughts? how can i make the design prettier (i suck at designing) and what other functions should i include? cheers
Been working on my personal cms for awhile and i managed to finish some pretty unique features.
Don't take that warning message so lightly, it actualy means what it says.
Cross-site request forgery is often forgotten when developers write their code, so i made sure i'm protected against it.
there will be a hidden token generated every instance of the page load. if a request is made and this token is changed at all, it will stop the request and log the ip etc into the database.
Since this is an admin panel, i'm going to log failed login attempts aswell.
The ability to ban certain ip addresses is also done
maintenance is also finished
I'm also using prepared statements to ensure i'm protected from sql injections.
PHP:
query = Database::dbConnect()->prepare("SELECT username, password FROM gweb_users WHERE username=:username AND password=:password");
$query->bindParam(':username', $secure_user);
$query->bindParam(':password', $secure_pass);
$query->execute();
if($row = $query->fetch()){
$_SESSION['username'] = $row['username'];
header("Location: admin_dash");
}
Thoughts? how can i make the design prettier (i suck at designing) and what other functions should i include? cheers
Last edited: