Member Avatar for newby08

I am trying to create a membership for my website. I would like my members to have passwords and to be able to log into their accounts. I would like them to be able to retrieve both their Usernames, as well as their passwords by clicking "forgotten username" or "fogot password".

However, I have ABSOLUTELY NO IDEA how to do this. If anyone could show me, step by step, on how to do this, I would truly appreciate it.

Thank you for reading my post. I hope to hear from someone soon.

  • 2 Contributors
  • 3 Replies
  • 95 Views
  • 23 Hours Discussion Span
  • Latest Post Latest Post by sillyboy

Dani AI

Generated

A production-ready membership system cannot be implemented with HTML alone. wants a quick start and correctly flagged client-side limits: HTML/CSS (and pure JavaScript) can show the UI, but account creation, storage, verification and password resets must run on a server or via a managed auth service. Client-side-only solutions are appropriate only for UI prototypes and must never hold real credentials.

Core, minimal workflow to implement now (and safe to expand later):

  1. HTML form for username, email, password and password confirmation (client-side checks are UX-only).
  2. Submit over HTTPS to a server endpoint; perform full server-side validation and uniqueness checks.
  3. Hash passwords with a modern algorithm (Argon2 or bcrypt) and store only the hash and metadata; never store plaintext.
  4. Require email verification for new accounts. For password resets generate a cryptographically secure, single-use, time-limited token; store the token hashed and expire it on use. Never email a password.
  5. For forgotten-username requests, send the username only to the registered email on file (after verifying ownership).
  6. Create server-side sessions and set cookie flags (Secure, HttpOnly, SameSite); protect forms with CSRF tokens.
  7. Add rate-limiting, optional CAPTCHA, logging and account lockout thresholds to reduce brute-force attacks.

For concrete security guidance on password hashing, resets and authentication patterns see the OWASP Password Storage and Authentication recommendations: OWASP Password Storage Cheat Sheet. For a quick hosted alternative that handles signup, verification and resets, consider a managed provider such as Firebase Authentication.

Recommended Answers

All 3 Replies

Member Avatar for sillyboy

there are many ways to do this, and it depends on how well you want to do this. things you may want to consider are performance, security, etc...

since this is posted in the html/css section does this mean you want to use html/css? in my opinion this is the simplest way, but provides little / no protection for your members.

perhaps you could do a search on server-side languages and decide which will meet your needs best (this goes outside the scope of html/css though).

Member Avatar for newby08

Thank you for your quick response. I am actually better at HTML than I am with anything else. I understand that HTML provides the least amount of security, but I'll like to do it with HTML format first. As my site grows, I'll be inclined to provide more protection, however for the moment I just need an immediate solution.

Member Avatar for sillyboy

Ok, you will need to at least use a little JavaScript for comparisons on username / password. Just note, the registration will not be possible using client-side code only!

Anyway, as the simplest (stupidest) option, you just have pre-defined username / password combinations and check this as a form is submitted using JavaScript.

Good luck.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.