Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Website Login to secure confidential information

Posted on 2008-10-10
8
Medium Priority
?
369 Views
Last Modified: 2013-11-19
We are in the process of setting up a website. On the website we want a secure login link, so our clients can login by screen name and password to access their information.

Each client will need to login with a unique screen name and password, giving them the ability to see the status of their accounts, (i.e. database or spreadsheet of pertinent information, along with ability to upload and download confidential documents, and communicate by posting messages). Due to the type of private information it will need to be encrypted and secured in a way that complies with current information security laws

I was in the process of setting up a website on GoDaddys WebSiteTonight, but it looks like we wont have the ability to set it up the way we need it.

I am unsure as to how to set this up and where to go from here.
0
Comment
Question by:nashvilletn
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
8 Comments
 

Author Comment

by:nashvilletn
ID: 22691114
Anyone have an answer???
0
 

Author Comment

by:nashvilletn
ID: 22691117
Anyone have an answer???
0
 
LVL 70

Accepted Solution

by:
Jason C. Levine earned 1000 total points
ID: 22691525
Hi nashvilletn,

If you have access to PHP and MySQL: http://www.phpeasystep.com/workshopview.php?id=6

0
Moving data to the cloud? Find out if you’re ready

Before moving to the cloud, it is important to carefully define your db needs, plan for the migration & understand prod. environment. This wp explains how to define what you need from a cloud provider, plan for the migration & what putting a cloud solution into practice entails.

 

Author Comment

by:nashvilletn
ID: 22692075
can this be done on godaddy's website tonight?
0
 
LVL 3

Expert Comment

by:wktang83
ID: 22692597
This tutorial (http://www.phpeasystep.com/workshopview.php?id=6) DOES NOT protect you against session hijacking. Unless you're encrypting the connection using SSL, the transmission of data between the client's computer and the server can be intercepted by an attacker, and can be used to hijack the session, and therefore gaining access to the administrative system.

If you are using php, read more about preventing session hijacking here:
http://phpsec.org/projects/guide/4.html

I have written a class in php which is able to defend against session hijacking. If you're interested, post back.
0
 

Author Comment

by:nashvilletn
ID: 22692626
So as long as SSL is utilized will this type of setup work? Do you know if this can be implemented in a website tonight website?
0
 
LVL 3

Assisted Solution

by:wktang83
wktang83 earned 1000 total points
ID: 22692655
nashvilletn:

According to this site,
https://www.godaddy.com/gdshop/hosting/hosting_build_website.asp?app_hdr=

they do give you a free SSL cert. (Only for the Premium Plan though).

If you're not on the premium plan, you can have SSL cert as an add-on for $29.99/yr.
https://www.godaddy.com/gdshop/ssl/ssl.asp

SSL certs will enable your website to have secure SSL encrypted connection.
0
 

Author Closing Comment

by:nashvilletn
ID: 31505133
Thank you for your assistance.  It is greatly appreciated!!!
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When it comes to security, close monitoring is a must. According to WhiteHat Security annual report, a substantial number of all web applications are vulnerable always. Monitis offers a new product - fully-featured Website security monitoring and pr…
Without even knowing it, most of us are using web applications on a daily basis.  In fact, Gmail and Yahoo email, Twitter, Facebook, and eBay are used by most of us daily—and they are web applications. We generally confuse these web applications to…
This video teaches users how to migrate an existing Wordpress website to a new domain.
Use Wufoo, an online form creation tool, to make powerful forms. Learn how to selectively show certain fields based on user input using rules to gather relevant information and data from your forms. The rules feature provides you with an opportunity…
Suggested Courses

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question