Guest User

Untitled

a guest
Sep 18th, 2018
94
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.83 KB | None | 0 0
  1. Did the following steps have sense in securing my login process?
  2. SESSION1 = random()
  3. SESSION2 = random()
  4. SESSION3 = random()
  5. SESSION4 = time()
  6. SESSIONHASHKEY = array(){[SESSION1 digits]};
  7. SESSIONRESULT = hash(Concatenation of caracters at position situated inside the SESSIONHASHKEY array from the SESSION2);
  8. Set the name of the button of the login to the SESSION3 number)
  9.  
  10. if !isset SESSION1 redirect login page
  11. if !isset SESSION2 redirect login page
  12. if !isset SESSION3 redirect login page
  13. if !isset SESSION4 redirect login page
  14.  
  15. if SESSION1 digits array != SESSIONHASHKEY redirect loginpage
  16. if MD5(concatenation of caracters at position situated inside the SESSIONHASHKEY) != SESSIONRESULT redirect loginpage
  17.  
  18. if !isset loginbutton_{SHA256(MD5(SHA256(MD5(SHA256(SESSION3)))))} redirect login page
  19. if (time() - SESSION4) >10 redirect loginpage
Add Comment
Please, Sign In to add comment