title: php user management systems
body: <p>I'm on my last steps to open my website, but the only thing that drove me crazy is the php user management. I found a lot of resources about building these systems and I believe that I can write them in my own way. The thing is that when it comes to security I get so freaking out what to go with. For example, when it comes to sending sensitive information over SSL, some people suggest to make sure that the info is encrypted in the registration form so that attacker can't hack it. And some other suggest to make sure that the debugging messages don't show when an error happen so that the attacker can't retrace the links .etc. </p>
  
  <p>now as I read from here and there that md5 is not safe anymore so I'm wondering how would hash new user password and etc... I found a link to some programmers who already offer some user management, but not sure if they are good enough since I'm concerned about security as a priority <a href="http://codecanyon.net/item/php-login-user-management/49008" rel="nofollow">CodeCanyon</a> </p>
  
  <p>so now what are the security measures that I have to be focusing on?
  are there any resources related to that?</p>
  
  <p>Thanks, </p>