Weak\Broken Authentication and Session Management
This item is really a range of different issues, gotchas and good practices. To begin with you probably want to use an out of the box authentication provider rather than trying to create your own. As part of this implementation hopefully your passwords are stored safely i.e. encrypted and salted. Account management such as account […]