Question

I’m in the final stages of implementing a CodeIgniter site which requires a really simple login system. One user, and one password to protect the admin area. I think I will be using one of the many CodeIgniter authentication libraries, which should allow me to ensure that people can’t read from the database without being logged in as admin (hopefully).

1. Are there any glaring holes in a setup like this?
2. Should I take further measures beyond using a library like this to ensure the security of the data in the MySQL database?

It will be hosted on a shared server; meaning little, or no server config will be possible.

Answer 1

There is a long discussion about the authentication systems available here: How should I choose an authentication library for CodeIgniter?

The latest version of Redux seems to be the favorite.

http://code.google.com/p/reduxauth/