Best Way To Secure Member's Area? HTML Form, Basic Auth, etc...

[mb]

Hi,

Just wanted to hear some of your thoughts regarding the best modern day methods of securing a member's area.

It seems most of the larger programs are just using Basic Authentication. I assume there are 3rd party or internal security scripts running in the background, but I've often heard it's easier for hackers to get what they want through the standard Auth login form.

Any thoughts?

marc

[Anna_O]

Strongbox. This stops almost all attacks. Even for a small site like ours there is a few attacks every week, and so far strongbox have managed to defeat all of them.

[Trax]

I've only heard good things about strongbox
if you want to fight random htaccess script assholes set username=users-email
their script barely guess correct email adresses
hope this helps a bit

[Tat2Jr]

strongbox straight up.... doesn't get any better.

[JD]

a twink with a sawed off shotgun

[Breakyourself]

disable right click with javascript

[Trax]

disable right click with javascript

good one

[Dalai lama]

Strongbox, it's great

[andrej_NDC]

pennywize or strongbox

[PussyTeenies]

Strongbox. This stops almost all attacks. Even for a small site like ours there is a few attacks every week, and so far strongbox have managed to defeat all of them.

hmz.. what do you need fot this then? and what are the costs?

[Dalai lama]

hmz.. what do you need fot this then? and what are the costs?

$100 per paysite. It kicks ass

[Anna_O]

hmz.. what do you need fot this then? and what are the costs?

Well, we have around 3 major attacks on our site per week. Imagine if we had no protection? For $100 it can prevent lots of more in bandwidth alone, not to mention the damage if the content of the members area were posted at hackersites every week...

[Xyborg]

HTTP Auth or strongbox