Home / Current Issue / Paper 1711093
Design and Evaluation of a secure login system using PHP and MySQL
Subject area: Science,Engineering and Technology · Area of research: Codeing
Abstract
With the growing reliance on web-based applications, securing user authentication has become a critical concern. This paper presents the design and evaluation of a secure login system developed using PHP and MySQL. The proposed system emphasizes user data protection by implementing password hashing, input validation, and prevention of common attacks such as SQL injection and cross-site scripting (XSS). The system architecture integrates a MySQL database to store user credentials securely, while PHP handles server-side authentication and session management. Performance and security evaluations demonstrate that the system provides reliable access control while maintaining efficiency in user login operations. Additionally, the system incorporates measures such as session timeout and account lockout mechanisms to enhance protection against unauthorized access. The study highlights best practices for secure login implementation in small to medium-scale web applications and offers insights into mitigating vulnerabilities associated with user authentication. Overall, the system provides a practical, secure, and scalable solution for safeguarding sensitive user information in web environments.
How to cite this paper
@article{1711093,
author = {Suraiya Shariff },
title = {Design and Evaluation of a secure login system using PHP and MySQL},
journal = {Iconic Research And Engineering Journals},
year = {2025},
volume = {9},
number = {4},
pages = {334-337},
issn = {2456-8880},
url = {https://www.irejournals.com/formatedpaper/1711093.pdf},
abstract = {With the growing reliance on web-based applications, securing user authentication has become a critical concern. This paper presents the design and evaluation of a secure login system developed using PHP and MySQL. The proposed system emphasizes user data protection by implementing password hashing, input validation, and prevention of common attacks such as SQL injection and cross-site scripting (XSS). The system architecture integrates a MySQL database to store user credentials securely, while PHP handles server-side authentication and session management. Performance and security evaluations demonstrate that the system provides reliable access control while maintaining efficiency in user login operations. Additionally, the system incorporates measures such as session timeout and account lockout mechanisms to enhance protection against unauthorized access. The study highlights best practices for secure login implementation in small to medium-scale web applications and offers insights into mitigating vulnerabilities associated with user authentication. Overall, the system provides a practical, secure, and scalable solution for safeguarding sensitive user information in web environments.},
month = {October},
}