<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"></head><body >Whoops, sent that a bit early by accident but you get the drift :).<div><br></div><div>I think if you don't want lots of framework bloat and are really worried about security, go with the lightest possible framework and then build up a stack of well audited, small, and security focused libraries, glued together by your own code. It's more work, so it kind of depends on the tradeoffs you want to make. <div><br></div><div>A list of PHP Sinatra clones is available at http://en.m.wikipedia.org/wiki/Sinatra_(software). I have no idea which are any good, but Slim still seems to be under active development. </div></div><div><br></div><div><br></div><br><br><div>-------- Original message --------</div><div>From: johnc <johnc@aktivix.org> </div><div>Date:21/11/2014 14:27 (GMT+00:00) </div><div>To: hacktionlab@lists.aktivix.org </div><div>Cc: </div><div>Subject: [HacktionLab] secure php login </div><div><br></div>-----BEGIN PGP SIGNED MESSAGE-----<br>Hash: SHA1<br><br>Hi,<br><br>OK no bitching please ;-) I want to use PHP to create a web frontend for<br>a system that will handle:<br>- - secure Login<br>- - registration<br>- - password reset<br>- - password recovery<br><br>Further requirements:<br>- -Secure!!!<br>- -Reasonably light (not really interested in the bloat of a heavy<br>framework like cakephp, Zend or similar)<br>- -PHP only. I don't have time to learn another language currently!<br>- -GPL licence or similar.<br>- -Under active development.<br><br>This looks promising https://github.com/panique/php-login-advanced What<br>do you think?<br><br><br>Looking for suggestions and comments. Many thanks.<br><br>Cheers,<br>John<br>-----BEGIN PGP SIGNATURE-----<br>Version: GnuPG v1.4.12 (GNU/Linux)<br>Comment: Using GnuPG with Icedove - http://www.enigmail.net/<br><br>iQIcBAEBAgAGBQJUb0u2AAoJELy1jPQ1KER7QW4QALTOVZZE3H0PK93g/AK9IUGy<br>JqnYGQuODI2p0KYYBjTvs37R94NmIw+7nMkFL8FCsqKBdOWotia8h0krCi9bQ1TJ<br>VJz3shKrg7JC9FLdn5I+Wyu6rMhkww2TyirPaZMUXkGOYxz6ptVsQT9SmIdhJJPH<br>sb3SVWPFCKxT7MPfEQmIxUEp9wyIl5ZDDCJIfv6vTU1aPwN6+uAYnqTKmHTWaX8e<br>RnlvFuSoUjHjxtpFduNHi6Z3C1EtBHQk430IYmcxehHPzUVzfK7vLfntltST6NxD<br>4FH0B9W7sfmhrSAwOLHWVwDqEqhQ4fV0RqAZ+W0JWNPwTeU5gxSeU2FyA5FoIT4S<br>tb1j28pLEfV1ygQUIcL0QMfbo6MVpJmaS86jGfM7mwQwDs783PqVYbXUKF48T5u1<br>KS+HRGi8JYlvdm2jYrwvH+AQpDcl9erTxhzu8bTdszvjL2j6gmiE1ZTIvLqu0VpN<br>p63aJJpZ/aTHLd9+YmDzSnFr3o12Bnr4P0BXwdoz1hf34ANlZxUe48oUQQ1h9ICz<br>1dur76LU7PY/GSP9og1a+9XbbnKLdJ4eSlUJ5D5lrnY6ur5oy9ytw+uv9x9zPC7y<br>7Qxpqsax5riuyvKsCsc7pZ0bXwogLLemMwprYFmbum0OEbgLitfl1Rz01YbaiAUl<br>uIaL3o/wu/8z/TdO6EKg<br>=MozQ<br>-----END PGP SIGNATURE-----<br><br>_______________________________________________<br>HacktionLab mailing list<br>HacktionLab@lists.aktivix.org<br>https://lists.aktivix.org/mailman/listinfo/hacktionlab<br></body>