How to set login validity period in php

With the vigorous development of the Internet, the importance of websites is constantly increasing, especially for some online businesses, and corresponding security issues are becoming increasingly prominent. Among them, login security is the most basic and important link. Setting the login validity period is one of the important directions. This article will introduce in detail how to use PHP language to complete this work.

1. What is the login validity period?

The login validity period refers to the period of time specified by the system that allows users to perform certain operations after logging into the website. If this time is up, the user must log in again. In this way, the security of user accounts can be effectively ensured and user accounts can be prevented from being misappropriated by criminals, thereby bringing huge risks to the website and users.

2. PHP method to set login validity period

PHP is a powerful and flexible language that can play an important role in web development. PHP also has its own set of methods for setting the login validity period. The following is the specific setting method:

(1) Use cookies to save login status

In PHP, you can use cookies to save the user's login status. The specific implementation method is as follows:

// Set cookie expiration time, add 1 hour to the current time
setcookie('login_status', '1', time() 3600);

// Judgment Login status
if (isset($_COOKIE['login_status']) && $_COOKIE['login_status'] == '1') {

// 用户已登录

} else {

// 用户未登录

}
?>

In the sample code, we first use the setcookie() function to set the cookie expiration time, here set to 1 hour. Then determine whether the user is logged in by determining whether the cookie exists.

(2) Use session to save login status

Using session is also a common way to save the user's login status. In PHP, you can use the following code to achieve this:

session_start();
$_SESSION['login_status'] = '1';

// Determine the login status
if (isset($_SESSION['login_status']) && $_SESSION['login_status'] == '1') {

// 用户已登录

} else {

// 用户未登录

}

In the sample code, we first use the session_start() function to open the session, and then store the login status in the session. Determine whether the user is logged in by judging whether the session exists.

3. Set a reasonable validity period

When setting the login validity period, you need to adjust it according to the actual situation. You cannot set a validity period that is too short or too long.

If the setting time is too short, users will frequently enter their account numbers and passwords, causing inconvenience to users. At the same time, frequent identity verification when users log in will also put unnecessary burden on the server and reduce the performance of the website.

If the setting time is too long, once the user account is stolen, the attacker will have a lot of time to perform malicious operations, bringing huge risks to the website and users. Generally speaking, the login validity period should be between 30 minutes and 1 hour, and can be adjusted according to the actual situation.

4. Other security precautions

In addition to setting a reasonable login validity period, there are some other security precautions that need to be paid attention to. The following are some common security policies:

(1) Set password policies reasonably to force users to use strong passwords.

(2) Strictly filter and verify the data submitted by users to prevent attacks such as XSS and SQL injection.

(3) Enable the https protocol to encrypt and transmit sensitive information such as user accounts and passwords to prevent man-in-the-middle attacks.

(4) Record user operation logs to facilitate tracking of abnormal operations.

(5) Regularly upgrade the system and software, fix loopholes in a timely manner, and improve system security.

Summary

Setting the login validity period is the basic link to ensure the security of user accounts. When using PHP to write web applications, we can use cookies or sessions to set the login validity period. At the same time, it is also necessary to set reasonable validity periods and perform regular system upgrades and other measures to ensure the security of the website.

The above is the detailed content of How to set login validity period in php. For more information, please follow other related articles on the PHP Chinese website!