Securing PHP Applications: A Deep Dive - Part Three - Authentication And Authorization

So far, we've examined some of the attacks for a hacker, as well as some of the thoughts around code---but now, let's consider Authentication and Authorization: the first layer of defense on any active site. One overriding thought should *ALWAYS* be "don't roll your own authentication"---in other words, people have spent a long, long time building this out. The examples here are purely informational and should be steps to consider---and should be treated as pseudo-code.