SimpleLogin–Secure

This library is now maintained by Stéphane Bourzeix at https://github.com/DaBourz/SimpleLoginSecure.

SimpleLogin–Secure for Code Igniter is a modified version of Anthony Graddy’s Simplelogin library. In Anthony’s words:

Simplelogin is designed to give you a quick and simple login library that will get you up and running with an unobtrusive authorization system very quickly. It does not try to guess how you want to structure your app, it simply tries to give you a little help.

There are three primary modifications to Anthony’s original code. Most importantly, SimpleLogin–Secure uses the phpass framework for secure, portable password hashing instead of straight md5 without a salt. Secondly, SimpleLoginSecure uses an e-mail address instead of a user name as the login key. And finally, it adds user_date, user_modified and user_last_login date/time fields to the default install.

For more information on why md5 hashing is not enough, see the excellent post about password schemes on the Matasano Security blog.

Installation, configuration and setup

Download the library zip file and extract the contents.

Copy SimpleLoginSecure.php and the entire phpass-0.1 directory to your system/application/libraries directory.

Create your database table using the supplied SQL sample. You can also edit the hash length and portability constants at the top of SimpleLoginSecure.php.

The methods exposed by SimpleLogin–Secure are identical to those of Simplelogin.

Copyright 2008-2011. Distributed under the GNU General Public License 3.0.