1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Session Login Access - Code, Language, Technology

Discussion in 'General Programming Chat' started by youtalk, Oct 31, 2015.

  1. youtalk

    youtalk Regular Member

    Joined:
    Jul 5, 2012
    Messages:
    341
    Likes Received:
    6
    Occupation:
    Owner
    Location:
    I don't even know anymore
    Let me start off by saying I am not a developer, but seeking information to aid some.

    What technology do you find to be the best at user login sessions?
    For an example, logging into an account (i.e.: FaceBook, Bank account, etc)

    I'm trying to understand how the security aspect of this works. I'm also interested in how a timed session would work with account access.
     
  2. mantic0re

    mantic0re Junior Member

    Joined:
    May 29, 2015
    Messages:
    118
    Likes Received:
    9
    Hello.

    Your question is unclear, are you talking about simulating a webbrowser by generating artificial sessions for a bot or are you talking about a backend system for your own website?

    If the latter is the case, then PHP + mysql is a good option.
     
  3. youtalk

    youtalk Regular Member

    Joined:
    Jul 5, 2012
    Messages:
    341
    Likes Received:
    6
    Occupation:
    Owner
    Location:
    I don't even know anymore
    Yes sorry. I'm referring to a backend system.

    I want a tough login system, not something that can be easily manipulated to gain access.
    I looked up more and did see php and MySQL is the normal method of this.

    Things such as:


    - one account per email
    - Allow a main email account, and have other emails that can login under it. Example [email protected], and all the sales people email under one account.
    - One login session for each email, checks browser, computer id, IP, etc.
    - session timeout, 30 minutes and logs them out.
    - After three failed logins, lock the user out for five minutes, and allow for a reset or reminder email to be sent to them.