Security of php code

Can php scripting be used for a username and password security site and how secure is it if you can??

Sry if this is random because i am really noob at it but plz help

LeX

Sure, PHP can be used for such a thing. It's as secure as you code it. You can write insecure code in any language.

there is an implimented md5 coding in PHP through the md5() function. But you can write a lot of different security stuff into the login / logout

It really just depends on what you mean by secure.

What needs to be secured?


Is it the information in the database?
-- if so, use md5 to create and store a hash
Is it the network connection?
-- if so use a SSL secure connection
Is it the PHP file itself?
-- if so, use the Zend encoder to encode the php file.

A very simple implementation of a login system (with only 1 username/password) would just
have a form with username and password that submits to a
page called process_login.php which has the following code

if($_POST['UserName']=="admin" && $_POST['Password']=="MyPassword"){
header("Location: /main_admin.php");
}else{
header("Location: /login.php");
}