使用用户帐户创建网页时，我需要牢记什么? [英] Creating a webpage with user accounts, what do I need to keep in mind?

问题描述

我正在尝试编写一个具有用户帐户的网站.除了密码和电子邮件地址外，没有太多敏感信息.但是我不太了解自己在做什么.我一直在学习.关于安全性或任何其他重要细节，我应该牢记什么吗?

I am trying to write a website that has user accounts. There isn't much sensitive information other than the password and email address. But I don't really understand what I'm doing; I'm kind of hacking it along as I go. Is there anything I should be keeping in mind with respect to security or any other important details?

推荐答案

您应该:

• 加密敏感数据
• 避免:
  • 避免sql注入
  • 会话劫持
  • 会话修复
  • encrypt sensitive data
  • avoid:
    • avoid sql injection
    • Session hijacking
    • Session fixation

    推荐读物:

    PHP安全指南

    这篇关于使用用户帐户创建网页时，我需要牢记什么?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！