Creating a secure login page

Creating a secure login page

What security precautions should we take when creating a login page?

    Requires Free Membership to View

    Login

    When you register, you'll receive targeted emails designed to keep you informed of the most relevant information on Agile development, application security, testing & QA, software requirements, and more.

    Hannah Smalltree, Editorial Director

    By submitting your registration information to SearchSoftwareQuality.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSoftwareQuality.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

When creating a login page, consider the following security measures.

If the content is highly confidential, use SSL. It will encrypt the user ID or password so any hackers intercepting Internet traffic will not be able to read the data passing through the Internet.

Depending on how you are authenticating, make sure you are not vulnerable to SQL Injection attacks. For more information about preventing SQL injection vulnerabilities, check out http://www.unixwiz.net/techtips/sql-injection.html. SearchAppSecurity.com also has a few tips on SQL injection in this feature, Don't become a victim of SQL injection.

This was first published in May 2006