仓库源文，站点原文

title: OAuth认证原理及HTTP下的密码安全传输 categories:

• 前端杂烩
• 网络安全 tags:
• tech
• cnblogs warning: true date: 2013-11-26 02:58:00 fromUrl: http://www.cnblogs.com/hustskyking/archive/2013/11/26/authentication-in-web.html from: 博客园

<label>username:</label><input id="uid" type="text">
<label>password:</label><input id="pwd" type="password">
<input type="submit">
<script type="text/javascript">
    var t = new Date*1,
        uid = $("#uid").val(),
        pwd = $("#pwd").val(),
        delta = encrypt($("#pwd").val() + t);

    $.post("./login.php",{
        uid: $("#uid").val(),
        pwd: delta,
        tid: t
    }, function(data){
        //do something.
    })
</script>

<?php
    define("uid", "user-A");
    define("pwd", "user-A-pwd");

if(time() - $_POST['tid'] > 60*2 ||
    $_POST['uid'] !== uid ||
    decrypt(pwd . $_POST['tid']) !== $_POST['pwd']){
    die("error");
}
?>