Security questions

[PxTVmx]

I'm about to release my first d4php based site (is also my first web programming project, a very simple website, but for many users - is a school environment-) and have questions about security, would be very grateful if someone could help me:

Is there any way (beyond steal my password) that anyone can download the PHP sources from my site (thus someone could, for example, to access the database login user and password)? if so, what should I do to avoid this risk?

What security measures should be taken before releasing a PHP based website?

Thank you in advance.

[405hp]

afaik the only way someone can see the php code is if the php complier on the server is shutdown. Not sure how it happens but probably only on a setup issue.

[PxTVmx]

Thank you very much for your reply, 405hp.

[MrTudorLovingBux]

Hello!:
I gave some issues...
First issue is:How do you protect youre self from Software that downloads all the files from a website? ( Like Offline Surfers)
Second: I have to create a website. It will be like this: Main form with all other stuff, login-register-reset password form, the usser forms (multiple ones) with logout included. Can you help me secure this website and give me a working good very hard to hack template (with MD5 please)?
Third: I want to use SHA1 insead of MDS Hash, is SHA1 more secure? Edit: or SHA-2
Fourth: I will buy RapidSSL Certificate, how will I integrate it?
Fifth: How I destroy a session when "logout" and how to remember the username and password?

Please help me, I will get back later in the day, I will be at work.

Thank You very much!

[405hp]

Are you using the Delphi for PHP/VCL or just plain old PHP?

[MrTudorLovingBux]

I am using Delphi for PHP.
I will be so glad if you could help me...

[405hp]

authorization login script