From one of today's threads

[pemburung]

"....important to follow Yank's and Fuecks threads on the forum...."

Nuff said.

[Lerza]

Care to elaborate?

Or perhaps share a link? I hate scavenger hunts ;)

[kgun]

The cite is from my first post in the thread:
availability calendar

Kevin Yank and Harry Fuecks are two of my favourite PHP resource persons. I think Fuecks is in the research front in the world on OO PHP.

Advice: Follow his and Yanks posts at the SitePoint forums if you want to stay updated on PHP.

Related thread: OOP in PHP and MySQL tips: Start here.

A fairly advanced access and authentication system is explained there. The system uses a session class in stead of session variables.

In the last post I rewrote the code, I think more than 30 lines to update to the last version of the the PEAR HTML_QuickForm class.

I did not find the fix on their forum, so I had to do it myself.

I do not know of a more secure authentication system written in PHP without using SSL. And I know how to make it even more secure:

• Storing session information in the database.
• Hide the login details in a cryptic folder and parse that file. See my second post in this thread:
  
  Three sites-one database for a hint if somebody are interesting in a more secure solution than:[list:ee5f3a95d3]
• Random image text verification.
• Confirmation email.
• Double checking Authentication.

[/list:u:ee5f3a95d3]