Hi everyone,
I have been planning an idea for a large project for quite a while now and I'd like to have go at starting it soon. The only thing that's stopping me is I'm not confident in my current ability to create a secure enough member login feature, (which would be integral to the site's functionality).
I'm a fairly experienced programmer and have created similar login systems in the past, but only for hobby sites. My concern is that if I am creating (what I hope to be) a fairly high publicity site for clients I will need to do the login/ session stuff really well and securely, so as to prevent misuse and hijacking on the site (a prospect that scares me quite a bit!)
So I've been thinking recently it may be wise to use an open source system or a widely recognised one instead of writing the login/session code myself, as I am no security expert. Might anyone be able to offer any solutions that they know of, or perhaps some advice as to how difficult it would be to create a relatively secure system myself?
Kind regards and thanks
Aidan