Tags: authentication

OAuth Social Login in PHP: Letting Users Sign In With Google, GitHub, and Facebook

Learn how OAuth social login works in PHP applications, from the authorization code flow to linking multiple providers per user.

Two-Factor Authentication in PHP: Adding a Second Layer of Login Security

A practical guide to adding TOTP-based two-factor authentication to PHP applications, with setup, verification, and recovery codes.

CSRF Protection in PHP: A Deep Dive

A deep dive into CSRF protection in PHP: how the attack works, the synchronizer token pattern, SameSite cookies, and why API endpoints need a different approach.

API Authentication in PHP: JWT, OAuth, and Choosing Between Them

A practical guide to API authentication in PHP: how JWT and OAuth solve different problems, refresh token strategies, and common authentication mistakes.

Building a Secure Password Reset Flow in PHP

A complete guide to building a secure password reset flow in PHP ÔÇö token generation, expiry, hashing, and the common mistakes that create real vulnerabilities.

PHP login and registration security best practices

PHP Login & Registration System: Security Best Practices

What separates a tutorial login form from a production-safe authentication system: password hashing, session security, rate limiting and the parts tutorials skip.