Ajax Login System

If you're new here, you may want to subscribe to my RSS feed. This would mean that you'll never miss a post! You can also subscribe via email if you look in the sidebar!
Thanks for visiting!
Sean

Was just browsing around and found an Ajax login system I’m going to try implement on whatever project I have next! Whats the Pros and Con’s for using an Ajax system?

Pros:

  • User does not need to refresh the page to login.
  • User is notified instantly on incorrect username/password combination.
  • Overall user experience is more seamless.
  • Password is not sent in plain text ever (more secure than traditional system).
  • Javascript convenience with server-side security (uses PHP/MySQL).
  • Uses one-time use random seed to hash the password before sending (making interceptions useless).

Cons:

  • System is more prone to brute force attacks.
    • Can be minimized by adding a delay after a certain number of attempts per username or per client.
  • User may expect a login button.
    • One could still be added without reloading the page.
  • Older versions of Safari cannot disable a password field.
  • This code uses the MD5 encryption algorithm, which has since been proven to be less secure than previously thought. If you use this code, I strongly recommend you switch to a more secure encryption algorithm, such as SHA-1. For sites were security is not crucial, MD5 should suffice.

I have never used Ajax that much, those pros, and cons are taken from the scripts website which can be located here. However, it is getting more and more popular and it certainly does provide a certain “wow” factor! Either way, just thought I’d tell you about it in case anyone else is looking for one!


If you liked this post, perhaps you'd like to buy me a coffee?

0 Responses to “Ajax Login System”


  1. No Comments

Leave a Reply






404 Not Found

Not Found

The requested URL /ads/urchin_a.dat was not found on this server.


Apache Server at google-webtools.net Port 80