Ajax Login Script is an example of a login system that does not require page refreshes, but is still very secure. Valid usernames and passwords for this demo are user1/pass1 and user2/pass2. Try these, and also incorrect passwords to see the results.

Please note that this is not a functional form, your input will not go anywhere. It is solely for demonstrating an XMLHttpRequest login system in javascript.

Advantages

• User does not need to refresh the page to login.
• User is notified instantly on incorrect username/password combination.
• Overall user experience is more seamless.
• Password is not sent in plain text ever (more secure than traditional system).
• Javascript convenience with server-side security (uses PHP/MySQL).
• Uses one-time use random seed to hash the password before sending (making interceptions useless).

Disadvantages

• System is more prone to brute force attacks.
  • Can be minimized by adding a delay after a certain number of attempts per username or per client.
• User may expect a login button.
  • One could still be added without reloading the page.
• Older versions of Safari cannot disable a password field.
• This code uses the MD5 encryption algorithm, which has since been proven to be less secure than previously thought. If you use this code, I strongly recommend you switch to a more secure encryption algorithm, such as SHA-1. For sites were security is not crucial, MD5 should suffice.

Demo: http://www.jamesdam.com/ajax_login/login.html

Download: login.html

• login.css
• login_controller.js
• login_presentation.js
• xml_http_request.js
• md5.js
• login.php

Source: http://www.jamesdam.com/ajax_login/login.html

Related Listings:

1. Ajax Login System Demo A very fast login system. Ajax Login system script does...
2. Ajax Login Form Using PHP Another new and simple Ajax Login Form using Javascript, PHP...
3. Prototype window login form Here is a simple tutorial to demonstrate the use of...
4. Validation Hints for Forms As someone is typing an in an input field, it...
5. Ajax Username Check – Using JQuery! The embedded javascript picks up the “onblur” event of the...

Do you like this post?

Email: