Random Salt Creator – PHP Snippet – Seasoned Security

6 Sep, 2011  |  Written by  |  under PHP, Security
4 Comments

random-salt-generatorI have been creating random salts for a while now and thought to myself why on earth am I doing this manually? So I put together a short snippet of php code to create these values for me. Better still I made it so it generates a random salt everytime I click my create option.

So what is it I have created you ask? Well, I am gonna tell you. I have coded an automatic script that selects at random a series of characters (including lowercase, uppercase, numbers and special characters) set to a certain string length which is also changed at random, then I apply md5 hash to this value for added security.

Continue Reading ->


IP Based Authentification – Intranet Systems

1 Sep, 2011  |  Written by  |  under PHP, Security
1 Comment

ip-authentification-snippetI had an interesting debate the other day regards how somebody running an intranet system could use IP Based Authentification instead of having to create a user login system. So eventually we came up with a very simple code that I would like to share with you all today.

What do I mean by IP Based? Instead of having a system that requires users to login, then the code issues the correct options based on the users account security settings, we can use the IP Address which they use to view the page.

You might have managers who use certain computers because they have a personal username and password on their computer to load it up. So untilise that computers already existing security and use the IP Address to view the pages and set access options.

Continue Reading ->


Seasoning your PHP with Salt – Basic Overview

26 Aug, 2011  |  Written by  |  under PHP, Security
3 Comments

php-seasoning-php-mustOk, this is not your regular seasoning of salt here. I am not talking about putting salt on your chips nor am I talking about putting salt in your computer either. (If you do by any chance please let me know in the comments because I could do with a laugh.)

Salt as we know it is something that we add to something else to make it taste better. With PHP we are not far from that same point of principle as we are adding salt to something to make it better or infact more secure because security itself is becoming more complex. Not only can you not rely on your users to choose secure passwords but you can not rely on tradditional means of password hashing either.

Continue Reading ->