i have got a php login page which i make use of session . Very simple one.
So if i would like to make it more secure , can it be implement base on php??
As i google i found that ssl is implement on a server (appache?) but not using the php code?
Also, whether have to pay for 128 bit ssl cert? thanks
What you want to do is use the SSL protocol, https. The data stream is encrypted both ways which helps prevent snooping. It uses port 443 and is configured int Apache.
Setting up Apache is not too difficult. You can do a “self-signed” certificate but you will not want to use it in the real world.
Your certificate must be verified by a CA (Certification Authority) They verify that you are a legitimate site. That is what you pay for when you buy a certificate.
However, if you don’t care about that the self-signed certificate will still encrypt your data. The problem is that any visitor that comes to your site will get a nasty, “this is an untrusted site” message and very few people will go past that page.
I’ve found the easiest way to setup a dev. box is to download XAMPP.