Skip to content
This repository has been archived by the owner on May 19, 2021. It is now read-only.

Login Page #1

Open
Androx27 opened this issue Apr 19, 2019 · 6 comments
Open

Login Page #1

Androx27 opened this issue Apr 19, 2019 · 6 comments
Assignees
Labels
enhancement New feature or request

Comments

@Androx27
Copy link
Member

Androx27 commented Apr 19, 2019

LOGIN PAGE

Form login page with different password for 2 actors

Needs to:

  1. Checking model files
  2. Checking controller files (system only showing a page based on their privileges)
  3. Checking view files (system only showing a page based on their privileges)
    Approx time = 3 days

NOTES
ALL PAGES SHOULD BE RESTRICTED BESIDES LOGIN PAGE OR AUTO REDIRECTED TO LOGIN PAGE BEFORE USER HAS BEEN AUTHENTICATED

Form forgot password

Concept:

  1. System showing a recovery code input form
  2. System hashing an input code (php) so only the perfectly match string or code would be processed
  3. System encrypt a hashed code (php)
  4. System DOESN'T needs to decrypt again beside matching the encrypted code since the encrypted+hashed ones should
    be in db

huehue

ref: https://luxsci.com/blog/secure-web-pages-and-web-forms-what-you-need-to-know.html

@Androx27 Androx27 self-assigned this Apr 19, 2019
@ryumada ryumada pinned this issue Apr 19, 2019
@ryumada ryumada added the enhancement New feature or request label Apr 19, 2019
@ryumada
Copy link
Member

ryumada commented Apr 19, 2019

btw, we don't need SSL cert as this web app gonna be used for offline usage.

@ryumada
Copy link
Member

ryumada commented Apr 19, 2019

but i don't know for the database, how do you think? @algorithmsEvolve

@algorithmsEvolve
Copy link
Collaborator

@RizkiTH we need to discuss about this tomorrow

@ryumada
Copy link
Member

ryumada commented Apr 19, 2019

okay if you say so

@Androx27
Copy link
Member Author

btw, we don't need SSL cert as this web app gonna be used for offline usage.

i know my sht

@ryumada
Copy link
Member

ryumada commented Apr 20, 2019

btw, we don't need SSL cert as this web app gonna be used for offline usage.

i know my sht

I just want to remind you

@ryumada ryumada unpinned this issue Apr 20, 2019
@ryumada ryumada pinned this issue Apr 22, 2019
@ryumada ryumada unpinned this issue Apr 28, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants