Password System and PHP Security Flaws?
I want to code a password protected user database, and I'm wondering if PHP would be sufficient and secure enough to use for the basic user interface and file access to the database records... I won't be using SQL, just flat text files.
I'm not really so worried about brute-force type hacking -- I'm more concerned about obvious security dangers that a lazy coder like myself might encounter... Pretty much I know basic stuff like limit the user input to only the most essential (no fancy characters allowed, etc.) -- but what are some other obvious mistakes?
|