<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/">
<channel>
<title>Comments on snippet: 'Login Class'</title>
<link>http://snipplr.com</link>
<description>Snipplr comments feed'</description>
<language>en-us</language>
<pubDate>Fri, 09 Jan 2009 08:57:26 GMT</pubDate>
<item>
<title>the_coder said on 2/18/08</title>
<link>http://snipplr.com/view/11/login-class/</link>
<description><![CDATA[ <p>I don't know if it is a good idea to store(even the md5hash) the password in the cookie!
It would be better if you'd store a newly generated fake<em>session</em>id in the database and the cookie.</p>
 ]]></description>
<pubDate>Mon, 18 Feb 2008 07:04:02 GMT</pubDate>
<guid>http://snipplr.com/view/11/login-class/</guid>
</item>
<item>
<title>llbbl said on 5/27/07</title>
<link>http://snipplr.com/view/11/login-class/</link>
<description><![CDATA[ <p>check out :</p>

<p>http://phpmylogon.sourceforge.net/</p>

<p>It is way better than this code. </p>
 ]]></description>
<pubDate>Sun, 27 May 2007 11:57:45 GMT</pubDate>
<guid>http://snipplr.com/view/11/login-class/</guid>
</item>
<item>
<title>IanLewis said on 5/19/07</title>
<link>http://snipplr.com/view/11/login-class/</link>
<description><![CDATA[ <p>Unfortunately if you call the login or check functions without first escaping the username and password you could fall victim to SQL injection. You should make sure you escape those strings before placing them in a SQL query.</p>

<p>Also, whoever uses this class will need to implement the database class that you are using. Is that included somewhere on Snipplr?</p>
 ]]></description>
<pubDate>Sat, 19 May 2007 06:42:07 GMT</pubDate>
<guid>http://snipplr.com/view/11/login-class/</guid>
</item>
</channel>
</rss>