Password Protection Question

[Asparagus]

Hi all,

Password protection newbie here...

I am creating a website that requires the user to login with a username and password. I DON'T want the login page to be a pop up box - I want it to be an actual HTML page where the user can enter a user ID and a password and then hit the "submit" button. When the "submit" button is pressed, I will have a PHP script that handles all of the login/password validation stuff...

My question is this - when the user presses the "submit" button - is this information sent SECURELY to the PHP script? Is there a secure way to encrypt the password before it is sent to the PHP script? Any suggestions here???

Thanks!

 

[jjones]

As far as I know, the only way to do it is using SSL.

 

[Skeeedunt]

Originally posted by: jjones
As far as I know, the only way to do it is using SSL.

 

[Drakkon]

you can use javascript to encode the password as the user is typing it in or before the form is submitted (use javascript to subit the form)...but then all someone has to do is reverse engineer your source....

 

[stealth2009]

Encryption is still done at the server side. From the client side you still send plain text. You really need SSL.

--------------------
Free Software Downloads
Email Notifier with auto-login for Gmail/Yahoo/Hotmail