Mysql (MariaDB) with PDO - Revision history

Mol: /* Establishing connection to the server */

2023-09-12T08:47:52Z

Establishing connection to the server

← Older revision		Revision as of 11:47, 12 September 2023
Line 40:		Line 40:

	The password is outside the internet, but be aware that if the hacker can upload a php file, it might be able to access the secret password.		The password is outside the internet, but be aware that if the hacker can upload a php file, it might be able to access the secret password.

			The code is shown as images, but is also downloadable here as a [https://wiki.luntti.net/images/e/ea/Class.txt text] format. Add php code tags around it; see the images.

	== Log a user ==		== Log a user ==

Mol: /* Establishing connection to the server */

2023-09-12T08:44:28Z

Establishing connection to the server

← Older revision		Revision as of 11:44, 12 September 2023
Line 34:		Line 34:

	[[File:Php mysql readThePassword.png\|thumb\|The code, unfortunately in image format]]		[[File:Php mysql readThePassword.png\|thumb\|The code, unfortunately in image format]]
			[[File:Php mysql class1.png\|thumb\|The first part]]
			[[File:Php mysql class2.png\|thumb\|The second part]]
			[[File:Php mysql class3.png\|thumb\|The third part]]
			[[File:Php mysql class4.png\|thumb\|The fourth part]]

	The password is outside the internet, but be aware that if the hacker can upload a php file, it might be able to access the secret password.		The password is outside the internet, but be aware that if the hacker can upload a php file, it might be able to access the secret password.

Mol: /* Establishing connection to the server */

2023-09-12T08:11:21Z

Establishing connection to the server

← Older revision		Revision as of 11:11, 12 September 2023
Line 32:		Line 32:

	First, it connects to the database and then reads some data. No logging in in this example.		First, it connects to the database and then reads some data. No logging in in this example.

			[[File:Php mysql readThePassword.png\|thumb\|The code, unfortunately in image format]]

			The password is outside the internet, but be aware that if the hacker can upload a php file, it might be able to access the secret password.

	== Log a user ==		== Log a user ==

Mol: /* Introduction */

2023-09-12T08:06:38Z

Introduction

← Older revision		Revision as of 11:06, 12 September 2023
Line 9:		Line 9:
	>> php_folder		>> php_folder
	>>> class.php		>>> class.php
			>>> loadData.php
	> passwords		> passwords
	>> public.com_passwords.txt		>> public.com_passwords.txt

Mol: /* Establishing connection to the server */

2023-09-12T08:06:21Z

Establishing connection to the server

← Older revision		Revision as of 11:06, 12 September 2023
Line 24:		Line 24:
	<syntaxhighlight lang="xml">		<syntaxhighlight lang="xml">
	<?php		<?php
	include ('php/~~class~~.php');		include ('php/loadData.php');
	$aa = $conn -> getData();		$aa = $conn -> getData();
	$bb = $conn -> getImages();		$bb = $conn -> getImages();
Line 30:		Line 30:
	</syntaxhighlight>		</syntaxhighlight>

	First, it ~~connectsa nd~~ then reads some data. No logging in in this example.		First, it connects to the database and then reads some data. No logging in in this example.

	== Log a user ==		== Log a user ==

Mol: /* Establishing connection to the server */

2023-09-12T08:04:59Z

Establishing connection to the server

← Older revision		Revision as of 11:04, 12 September 2023
Line 20:		Line 20:

	Store the password into a secure place, thus above the the www directory. Php can access that.		Store the password into a secure place, thus above the the www directory. Php can access that.

			The file index.php includes the php file
			<syntaxhighlight lang="xml">
			<?php
			include ('php/class.php');
			$aa = $conn -> getData();
			$bb = $conn -> getImages();
			?>
			</syntaxhighlight>

			First, it connectsa nd then reads some data. No logging in in this example.

	== Log a user ==		== Log a user ==

Mol: /* Introduction */

2023-09-12T08:02:19Z

Introduction

← Older revision		Revision as of 11:02, 12 September 2023
Line 10:		Line 10:
	>>> class.php		>>> class.php
	> passwords		> passwords
			>> public.com_passwords.txt
			</pre>
			The folder www.public.com is connected to the internet, and passwords is not available from the internet. The password files contains the passwords and login credentials; this file is extremey simple. Only the password:
			<pre>
			thisIsMySecretPassword
	</pre>		</pre>
	~~The folder www.public.com is connected to the internet, and passwords is not available from the internet.~~

	== Establishing connection to the server ==		== Establishing connection to the server ==

Mol: /* Introduction */

2023-09-12T08:00:54Z

Introduction

← Older revision		Revision as of 11:00, 12 September 2023
Line 3:		Line 3:
	Some of my database stuff is shown.		Some of my database stuff is shown.

			File structure is as follow:
			<pre>
			> www.public.com
			>> index.php
			>> php_folder
			>>> class.php
			> passwords
			</pre>
			The folder www.public.com is connected to the internet, and passwords is not available from the internet.

	== Establishing connection to the server ==		== Establishing connection to the server ==

Mol: /* Establishing connection to the server */

2021-09-18T17:32:39Z

Establishing connection to the server

← Older revision		Revision as of 20:32, 18 September 2021
Line 7:		Line 7:
	== Establishing connection to the server ==		== Establishing connection to the server ==

	Store the password into a secure place, thus ~~outside~~ the the www ~~folder~~. Php can access that.		Store the password into a secure place, thus above the the www directory. Php can access that.

	== Log a user ==		== Log a user ==

Mol: /* Log a user */

2021-09-18T17:29:20Z

Log a user

← Older revision		Revision as of 20:29, 18 September 2021
Line 13:		Line 13:
	SSL connection. Hash and salt. Php [https://www.php.net/manual/en/ref.password.php password hashing functions] and mainly <syntaxhighlight inline>password_hash</syntaxhighlight> with <syntaxhighlight inline>password_verify</syntaxhighlight>.		SSL connection. Hash and salt. Php [https://www.php.net/manual/en/ref.password.php password hashing functions] and mainly <syntaxhighlight inline>password_hash</syntaxhighlight> with <syntaxhighlight inline>password_verify</syntaxhighlight>.

	Check on the database if a username is ~~used~~. If it is, fetch the password hash and compare that against the user inputted hash~~, <syntaxhigh~~		Check the database if the username is exists. If it is, fetch the password hash and compare that against the user inputted hash.

	~~Fetch password hash from the database where the username = the inputted username.~~
	~~If rows are found, then there's a user~~
	~~Now you compare the inputted password against the hash stored in the database.~~


	Php's [https://www.php.net/manual/en/function.hash.php hash function] includes multiple algorithms, and ''the well known hash functions MD5 and SHA1 should be avoided in new applications. . . It is rather safe to assume that the SHA2 family with its most prominent members SHA-256 und SHA-512, is better than SHA1. . . it is a good idea to prefix a salt to the password before hashing, to avoid the same passwords to hash to the same values and to avoid the use of rainbow tables for password recovery.''

	''the salt should be random string with at least as many variable bits, as there are bits in the hash result. In the user database, store username, the randomly generated salt for that user, and the result of hashing the salt-password-string. Access authentication is then done by looking up the entry for the user, calculating the hash of the salt found in the database and the password provided by the user, and comparing the result with the one stored in the database.''

	~~https://makitweb.com/login-page-with-remember-me-using-pdo-and-php/~~