Open joedelfonte opened 1 week ago
Also Try to think an easy user identification like handling forgot password
Disregard how to identify user from its device using-- thats redundant for our project Try using IP address or mac?
Then remember in using User Agent
We Create a cookie and also stored in database, by using cookie we can initiallize the last user or what user access using that browser it can, we can use it to define all possible data need in that session
The parent class contains confidential data like password and child class will contains other data needed
password_hash is a good algorithm making it secure when it is in verifiying process
example:
Secure password as it retrieve from database
$hashedPassword = password_hash($databasepassword, PASSWORD_DEFAULT);
it secure password like
Original : password
hash : $2y$10$eImiS2N8Zc3q9/0I2t8yOeH/x3F1MfrT2Re5JoN2HwhYc1O4I1wGm
then by usingpassword_verify()
we can verify if the encryped string is matched
Need to Finalize how PHP handle data -- 1 User per Run if possible add switch account by adding cookies table same data as associated account