Authorize via MySql?
 

We´re working on a new paysite project and thought about authorizing based on html form+MySql instead of .htaccess.. Is this a better method regarding password crackers ect.?
Is there any downsides to this method?

Htaccess and mod_auth_mysql works great.

Just add the Mod_Auth_mysql modules to apache.

:thumbsup

Authorizing via a database (if it is properly index) is better than .htacess if you have a relatively large number of users. For small user lists, you're probably better off with .htaccess.

As for trying to defeat password crackers, it doesn't make any difference whether you are checking them against a flat file or a database, assuming your database can handle the load.

If you're looking to make life more difficult for the password crackers, you might want to look into the Auth::Cookie module. You can modify that in ways that will make it almost impossible to brute force passwords.

thank you for the useful info :-)
Another thing that made me think about the database driven Authorization is that I want to give the monthly members access to sections that are non-available for the trial members..