Using the HTTPS (SSL/TSL) protocol in a login with 2 (two) levels of authentication in PHP?

Asked

Viewed 681 times

2

I am starting a project that will work with inventory information and other more sensitive data of companies so I decided to do 2 (two) login levels as in the systems of banks.

first authentication

  • Consists of providing email and password chosen by the user.

2nd authentication

  • It consists of providing a username (login) and a password given by the system itself.

How to make login pages use only HTTPS as a data transfer and communication protocol?

  • 1

    What have you done? What is the difficulty? Your question is too wide.

  • @Diegofelipe then my problem is to make the system stay in the https protocol and make php the login password of the 2nd part

  • To make sure that the user will access via a secure connection, you must use SSL. http://php.net/manual/en/book.openssl.php

  • 1

    This question has a very good bias. I will edit according to your comment here, @Daniel.

1 answer

0

1. What is HTTPS?

[ref.]

HTTPS is nothing more than communication done over the internet using the protocol HTTP with a secure connection encrypted in the transport layer with SSL.

2. How to use with PHP?

[ref.]

You will need to enable SSL on the server and also run the SSL certificate you purchased (you can have a look at Openssl which is better).

With this, you can force the user to use HTTPS on login, by means of configuration of .htaccess and protocol verification on the page.

3. Useful links

Browser other questions tagged

You are not signed in. Login or sign up in order to post.