What type of authorization is more secure?

Question

PHP

Task: creating a secure authorization for just one user.
1. Create a table in the database with a username and password
2. Create a check like 'if (text== "text")' with the specified password and username in the check file itself
So which is better to choose?

Answer 1

1. If there is only one user and no one can access the php code, you can do so.
2. But in other cases, I would suggest the second option.
In general, it is better not to place any critical information in php files.

Answer 2

If you create to a file, then try the following code:

<form method="post" action="check.php">
Ваш логин: <input type="text" name="user">
Ваш пароль: <input type="password" name="pass">
Ваш соль: <input type="text" name="salt">
<input type="submit">
</form>

check.php

<?php
$user = $_POST['user'];
$pass = $_POST['pass'];
$salt = $_POST['salt'];
$hash = file_get_contents('ZmlsZQ==.dat');
if(md5($user).md5(md5($pass)).md5(sha1(base64_encode($salt))) == $hash){
....
}else{
die('Hacking Attempt');
usleep(2);
header("Location: http://tebe.dostupa.net");
}
?>

Answer 3

'if (text=== "text")
is enough in php. just hash with good algorithms (not md5)

Answer 4

'if (text==="text")

Well, not feng shui at all.

Answer 5

2. Create a check like 'if (text== "text")' with the specified password and login in the check file itself,
well, that's generally hello :D