Introduction
There are many problems with the personal management system now. Everyone is welcome to fix bugs and add functions.
Today I will improve the login part. QQ group: 152448006
Address:
Login
The login part is easy to say, but difficult to say! But it’s not easy to do well.
I considered two factors:
1. Convenience. Users are relatively lazy, so they generally don’t like login interfaces that require too much input.
2. Security: First of all, prevent dos attacks. Many people think of verification codes, and so do I. So when I log in incorrectly for the fourth time, I will verify your verification code in the background.
The verification code still needs to go through your entire PHP application. I personally recommend blocking this attack IP before the PHP application layer. But I don't have such good hardware conditions, so I just made a simple application (in the database, it still needs to be applied through PHP), and wait for the conditions to be placed directly in other applications (such as memcached) in the future.
Login process
1. Open the page:
1) If the user has logged in more than three times, the verification code will be displayed when the page is opened.
2) If it exceeds 6 times, then the external IP will be blocked directly.
2. Login operation
1) Block the IP. We will determine whether the IP has been logged in more than 6 times.
2) When verifying an account, we determine whether to perform a verification code based on the number of verifications.
Thanks to Sakura, after his guidance, I made some changes to the program, and now it becomes the following flow chart. - The program becomes more intuitive.
Interface situation
After verifying three times, the following situation occurred
After verification more than 6 times, something will happen.
The following will happen when you visit next time
Extract part of the code
﹏After Sakura’s guidance, changes were made, and the entire program looks more intuitive and easy to understand. .
Summary
Welcome everyone to come and develop together. In addition to creating good products, developing this project is mainly for technical exchanges and to see everyone’s good technology.
Original link: http://www.cnblogs.com/baochuan/archive/2012/09/08/2676763.html
[Editor’s recommendation]
The above has introduced the perfect login module of PHP "Personal Management System", including management system and PHP content. I hope it will be helpful to friends who are interested in PHP tutorials.