Force Login Page Protection
Budget: $30 – $250 USD
My site stores user records in MySQL and already has a username-and-password form, yet anyone who bookmarks the internal page can still open it directly. I need that loophole closed.
Your job is to wire the authentication checks correctly so every visit to the protected page is first validated against the existing MySQL session. If the visitor is not signed in, they must be redirected to the login form—no exceptions, no back doors.
While doing this, make sure the credentials stay encrypted in transit and the passwords remain securely hashed inside the database. Please refactor or add the minimum necessary code (PHP, Node, or another language is fine as long as you note which one), comment it clearly, and include a short read-me so I can plug it straight into production and test.
Your job is to wire the authentication checks correctly so every visit to the protected page is first validated against the existing MySQL session. If the visitor is not signed in, they must be redirected to the login form—no exceptions, no back doors.
While doing this, make sure the credentials stay encrypted in transit and the passwords remain securely hashed inside the database. Please refactor or add the minimum necessary code (PHP, Node, or another language is fine as long as you note which one), comment it clearly, and include a short read-me so I can plug it straight into production and test.
Related categories:
PHP
JavaScript
Web Security
Software Architecture
MySQL
Web Development
Encryption
Security