[thelist] Question: Security in Web pages: hashes, etc

[David Slonosky]

I'm looking for one or more information pages on what constitutes a good 
set of:

- authentication page
- admin control panel-like page
- secure MySQL transactions with PHP

The business scenario is:

An admin logs in over the Web using a Web browser. After being 
authenticted, the admin is passed to the admin control panel. Here the 
admin can do a set of tasks using a PHP frontend to a MySQL database.

I imagine the answers to all this is all server dependent, so the 
hypothetical set of pages is being hosted on an Apache Web server.

I've read some stuff about passing a secure hash in the URL of the 
browser, but I'd like a complete tutorial, or a good book on the subject.

David
Fuddle Duddle! - Pierre Trudeau