Website Review and Suggestions

#1 (permalink)

Hello all,

Not sure if this was the best place to post this, but it seemed the most logical.

I just created a site for my current work and it includes a back-end that requires a login. To test the security of my coding, Id like to see if anyone can bypass the login and access the control panel. If you can get in, you will know. I would love to hear how you were able to do it and how I can fix it.

Thanks to anyone who tries.

#2 (permalink)

Seems reasonably secure. You escaped apostrophes correctly so sql injection wouldn't work. Looks like there's no account disabling so if someone REALLY wanted to, they could write a script to try and determine a login through brute force. Your admin login isn't "petra" or "admin" I hope right? =P

__________________
~nyef

Please login or register to view this content. Registration is FREE

#3 (permalink)

No, names and passwords will be kept random and I can change them at any time. There is only going to be at most 3 or 4 different users accessing this area and will be kept in a hidden directory from normal viewing.