PHP Classes

Mafia Session: Secure user authentication encrypting password

Recommend this page to a friend!
     
  Info   View files Files   Install with Composer Install with Composer   Download Download   Reputation   Support forum   Blog    
Ratings Unique User Downloads Download Rankings
StarStar 35%Total: 3,462 All time: 980 This week: 455Up
Version License PHP version Categories
mafiasession 1.0BSD License5PHP 5, Databases, User Management, Se...
Description 

Author

Marcelo Costa

This class can be used to authenticate Web users securely.

It creates a key encoded with SHA1 based on the IP address and the current time when an user accesses the login page.

The key is used to generate a salt value that is used to encrypt the password that the user enters in the login form.

On the server side the class uses the same salt to verify whether the password entered by the user matches the password stored in a database.

If the authentication is successful, the class starts an authenticated user session.

The login keys, user and session information is stored in a database. Currently the class supports either MySQL or PostgreSQL databases.

Innovation Award
PHP Programming Innovation award nominee
February 2007
Number 3

Prize: One copy of the Zend Studio		 Authentication is an aspect that concerns developers implementing sites that require high security level.

Using SSL avoids the eavesdropping problem caused by the possibility of having an attacker sniffing the connections to a Web site to steal user passwords. However, not every site owner can afford buying and renewing SSL certificates every year.

This package offers a solution that avoids the need for SSL certificates. It uses session keys to encrypt the user passwords before submitting a login form to the server.

Manuel Lemos
Picture of Marcelo Costa
Name: Marcelo Costa <contact>
Classes: 9 packages by
Country: Brazil Brazil
Innovation award
Innovation award
Nominee: 1x

 

  Files folder image Files (15)  
File Role Description
Plain text file class_pdosession.php Class version 2.0 for pdo driver
Accessible without login Plain text file base64.js Data javascript base64
Plain text file class_mafiarelbd.php Class base sql class
Plain text file class_mafiasession.php Class main class
Plain text file class_mafiasql.php Class sql class
Plain text file class_pdo_extension.php Class pdo extension class
Accessible without login Plain text file leiame.txt Doc. readme
Accessible without login Plain text file login.php Example login form exemple
Accessible without login Plain text file mafiasession.php Example exemple script
Accessible without login Plain text file md5.js Data javascript md5
Accessible without login Plain text file mysql.sql Data mysql database script
Accessible without login Plain text file pgsql.sql Data postgres database script
Accessible without login Plain text file sha1.js Data javascript sha1
Accessible without login Plain text file _autoload.php Conf. setup script
Accessible without login Plain text file _autoloadpdo.php Data pdo.php

The PHP Classes site has supported package installation using the Composer tool since 2013, as you may verify by reading this instructions page.
Install with Composer Install with Composer
Downloadmafiasession-2007-10-02.zip 24KB
Downloadmafiasession-2007-10-02.tar.gz 17KB
Install with ComposerInstall with Composer
 Version Control Unique User Downloads Download Rankings  
 0%
Total:3,462
This week:0
All time:980
This week:455Up
 User Ratings  
 
 All time
Utility:50%StarStarStar
Consistency:37%StarStar
Documentation:31%StarStar
Examples:31%StarStar
Tests:-
Videos:-
Overall:35%StarStar
Rank:4161
  

  Applications that use this package  
No pages of applications that use this class were specified.

Add link image If you know an application of this package, send a message to the author to add a link here.


  Related pages  
Framework with security session implements
It provides one class that extends the PDO database access abstraction class to simplify the execution of SELECT, INSERT, UPDATE and DELETE queries.