Innovation Award
 February 2007
Number 3 |
Authentication is an aspect that concerns developers implementing sites that require high security level.
Using SSL avoids the eavesdropping problem caused by the possibility of having an attacker sniffing the connections to a Web site to steal user passwords. However, not every site owner can afford buying and renewing SSL certificates every year.
This package offers a solution that avoids the need for SSL certificates. It uses session keys to encrypt the user passwords before submitting a login form to the server.
Manuel Lemos |
This class can be used to authenticate Web users securely.
It creates a key encoded with SHA1 based on the IP address and the current time when an user accesses the login page.
The key is used to generate a salt value that is used to encrypt the password that the user enters in the login form.
On the server side the class uses the same salt to verify whether the password entered by the user matches the password stored in a database.
If the authentication is successful, the class starts an authenticated user session.
The login keys, user and session information is stored in a database. Currently the class supports either MySQL or PostgreSQL databases.
| Ratings | Utility |
Consistency |
Documentation |
Examples |
Tests |
Videos |
Overall |
Rank |
| All time: |
Not sure (50.0%) |
Insufficient (33.3%) |
Insufficient (25.0%) |
Insufficient (25.0%) |
- |
- |
Insufficient (33.3%) |
1863 |
| Month: |
Not yet rated by the users |
No application links were specified for this class.

If you know an application of this package, send a message to the
author to add a link here.
| Link |
Description |
| OOE |
Framework with security session implements |
| PDO_EXT |
It provides one class that extends the PDO database access abstraction class to simplify the execution of SELECT, INSERT, UPDATE and DELETE queries. |