Yahoo! uses protection, as does anyone who uses vBulletin. I am of course talking about protecting your web applications and it’s users, and more specifically the logon processes for your application.

You could use SSL logins, but on a shared host this isn’t an option. One option left to you is to let the usernames and passwords flow over the internet in plain text. With a little javascript it is possible to put some security into the process. The rest of this post is about implementing this. Don’t worry if you have javascript disabled, it falls back to the original method of sending it in plain text.

Continue Reading “How Much Protection Do You Use?” »