PHP: User Authentication

Find out how to apply best practices for user authentication to your own PHP projects and avoid costly security pitfalls.

Introduction

• Restricting user access in PHP applications
• How to use the exercise files on GitHub

1. User Authentication Overview

• Identification and access control
• Hashing and storing passwords

2. Implementing User Authentication in PHP

• Creating the database table
• Introducing the sample project
• Adding new users
• Logging in users
• Logging out users
• Controlling access to pages and functions
• Challenge: Editing users
• Solution: Editing users

3. Working with Strong Passwords

• Password requirements
• Preventing weak passwords
• Resetting forgotten passwords

4. Securing User Authentication

• Preventing IDOR
• Using HTTPS
• Protecting access tokens
• Keeping track of logins
• Challenge: Expiring logins
• Solution: Expiring logins

Conclusion

• Next steps