Re: Web site authentication

For most we use the "Basic" autentication, but in a proyect to enable clients to access the system I'm using a file with the e-mail as key and the password as an encription key.
When the user tipes the proper password, the data gest decripted ok, otherwise there is no way to recover the password (at least I think so, except for exaustive trial).

Walden H. Leverich wrote:

Mike,

All the apps we're doing use our own authentication, specifically we're
checking "username" and "password" in a table that represents the
customer/vendors/users/etc. We've found that to be the most flexible
since it allows us to record any attributes about the login we care to
such as enabled/disabled, force password change, invalid attempts, last
login date/time/ip, etc.

As for session management, we're using a browser-cookie to record
"session", but I'm curious what you mean by "persistent sessions".

-Walden