[thelist] PHP Login Security

[.jeff]

liam,

><><><><><><><><><><><><><><><><><><><><><><><><><><><><><
> From: Liam Delahunty
>
> [...] But don't forget, and this is a BIG sin committed
> by loads of sites, that there is little or no point
> using encrypted data for "security" if the data has been
> entered on a non secured connection.
><><><><><><><><><><><><><><><><><><><><><><><><><><><><><

are you talking about a form that sits on a non-secure page posting to a secure page?  if so, then you're mistaken.  so long as the data is posted to a secure page, the data is encrypted.  it doesn't matter one bit whether the page the data was posted from is secure or not.

.jeff

http://evolt.org/
jeff at members.evolt.org
http://members.evolt.org/jeff/