DEV Community

Discussion on: How Can i create a Secure SignIn Portal In PHP after Using Password Hash on SignUp Page.

Collapse
 
rvxlab profile image
RVxLab • Edited

In addition, this line is vulnerable to an SQL Injection:

$sql = "SELECT * From user WHERE regno = '{$regno}' ";
Enter fullscreen mode Exit fullscreen mode
Collapse
 
grahamthedev profile image
GrahamTheDev

That was the bit I meant with point 1 but it obviously wasn't clear, thanks for pointing it out! ❤

Thread Thread
 
vinhpedro profile image
Elijah Emmanuel

thank you all, your advice really helped me