Session Login Access - Code, Language, Technology

Let me start off by saying I am not a developer, but seeking information to aid some.

What technology do you find to be the best at user login sessions?
For an example, logging into an account (i.e.: FaceBook, Bank account, etc)

I'm trying to understand how the security aspect of this works. I'm also interested in how a timed session would work with account access.

Hello.

Your question is unclear, are you talking about simulating a webbrowser by generating artificial sessions for a bot or are you talking about a backend system for your own website?

If the latter is the case, then PHP + mysql is a good option.

Yes sorry. I'm referring to a backend system.

I want a tough login system, not something that can be easily manipulated to gain access.
I looked up more and did see php and MySQL is the normal method of this.

Things such as:


- one account per email
- Allow a main email account, and have other emails that can login under it. Example [email protected], and all the sales people email under one account.
- One login session for each email, checks browser, computer id, IP, etc.
- session timeout, 30 minutes and logs them out.
- After three failed logins, lock the user out for five minutes, and allow for a reset or reminder email to be sent to them.