Ravi Sir's Cyber Security Cards › Revision Cards
Accounts: Register, Login and Logout
Accounts: Register, Login and Logout Pages to sign up, log in and log out. password_hash() uses a slow, salted method. A stolen users table is hard to crack. A new session ID at login stops session fixation . Logout is POST-only with a CSRF token. Showing “User not found” vs “Wrong password”. That t
Read card text
What this card says
What it is
Pages to sign up, log in and log out.
Why it matters for security
password_hash() uses a slow, salted method. A stolen users table is hard to crack.
A new session ID at login stops session fixation. Logout is POST-only with a CSRF token.
Common mistake
Showing “User not found” vs “Wrong password”. That tells attackers which usernames exist.
Show one message: “Invalid username or password”.
Learn more in the lesson: 16.6 Accounts: Register, Login and Logout