Creating a secure login script in PHP and MySQL without HTTPS -

question

is this post on wikihow reference create secure login script in php , mysql? in warnings section, author(s) emphasizes code can used https. not able use https, need implement relatively secure login script in php , mysql, , therefore wondering if script implemented http connection well.

solved

a third party solution best solution create secure login script in php , mysql. utilizing php framework (e.g. symfony, ulogin) or external parties (e.g. facebook, google), need create entirely new working login script plus authorization (the remember-me functionality) can avoided. if others have done thorough research , gained experience create login functionalities, safer , easier use work.

although create login system yourself, recommended let external parties you.

it takes lot of experience right, , done wrong.

although tutorial looks okay me, there many factors consider, , seems semi-old. php 5.5 offers password_hash , password_verify, recommend on page suggests.

so if have make own system; consider making use of above-mentioned functions, if you're restricted lower php versions, there backports version 5.3.7 available.

if don't have make own system, make use of external parties (google, facebook) handle logging in you, or make use of framework has authentication support.

so in general gist of it: don't try yourself, make use of other people offer years of experience in it. incredibly difficult right.