Hello,
I wanted to share with you my approach for a somewhat secure PHP login method, complete with a basic template and easy setup.
Just drag and drop the contents of the zip into your root-folder and navigate to yoursitename.domain/install and follow the instructions.
An admin account will be created automatically.
When finished with the initial setup, go to /inc/settings.php and change your SMTP credentials.
Working site built on top of this template/release:
Here are some key features.
Download:
I wanted to share with you my approach for a somewhat secure PHP login method, complete with a basic template and easy setup.
Just drag and drop the contents of the zip into your root-folder and navigate to yoursitename.domain/install and follow the instructions.
An admin account will be created automatically.
Working site built on top of this template/release:
Bağlantıları görmek için lütfen
Giriş Yap
Here are some key features.
- IP Banning on multiple failed logins (For a period of time)
- Account lockout on multiple failed logins (except for previous IPs used with successful logins - to prevent denial of service caused by bruteforce)
- HTTPS enforcer
- Email notifications on successful logins from new IPs (With location data)
- Email notifications on successful logins using stolen cookies from a new location (with location data)
- Input sanitation / SQL injection prevention
- Safe hash-methods for stored passwords
- Safe cookie-handling with one-time hashes
- ReCaptcha v.3 checks done by Google
- IP Logging
- 2FA with Google Authenticator
- Forces users to use a strong password
Download:
Bağlantıları görmek için lütfen
Giriş Yap