[HacktionLab] secure php login

[ekes]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 21/11/14 15:27, johnc wrote:
> -Reasonably light (not really interested in the bloat of a heavy 
> framework like cakephp, Zend or similar)

As my answer would automatically be just use Symfony2's Security
Component, and you've got your choice of front-ends, that's probably
not helpful (though, and I believe this counts for zend2 as well, you
don't need to use the framework, just the required components); but it
does highlight a question:

> - - secure Login - - registration - - password reset - - password
> recovery

That's the front-end forms and probably explains the sort of
authentication you want; but not what you want to do with the
authorization. Even at its simplest you want two options on routes -
authenticated / not authenticated?

ekes
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=201a
-----END PGP SIGNATURE-----