Question

I know how to write custom form validation’s for codeigniter and I am considering writing my login validation function into a form validation call back function. My theory for this is it is an easy way to use the codeigniter form validation class to feedback to the user that the login failed.

I can’t see anything wrong with this and certainly it would work but is there anything inherently bad in this approach? Would it add a potential weakness in the security of my web apps login?

Answer 1

You can surely use Codeigniter’s form validation library for this purpose.

However, I would advise against writing your own authentication system and use an existing one such as Tank Auth or ION Auth.