Please Crack my Admin

**melanko** · 03:22 PM

Hello all,

Not sure if this was the best place to post this, but it seemed the most logical.

I just created a site for my current work and it includes a back-end that requires a login. To test the security of my coding, Id like to see if anyone can bypass the login and access the control panel. If you can get in, you will know. I would love to hear how you were able to do it and how I can fix it.

Thanks to anyone who tries.

**nyef** · 06-05-2008, 10:14 PM

Seems reasonably secure. You escaped apostrophes correctly so sql injection wouldn't work. Looks like there's no account disabling so if someone REALLY wanted to, they could write a script to try and determine a login through brute force. Your admin login isn't "petra" or "admin" I hope right? =P

**melanko** · 06-05-2008, 10:24 PM

Quote:

Originally Posted by nyef

Your admin login isn't "petra" or "admin" I hope right? =P

No, names and passwords will be kept random and I can change them at any time. There is only going to be at most 3 or 4 different users accessing this area and will be kept in a hidden directory from normal viewing.