title: secure webapplication online
body: <p>I have a webapplication which id like to host online. The user logon consists of a hashed password which is saved in the db and verified via the code, simple but it was ok for a small office which had an onsite server.</p>
  
  <p>However i dont think this will be suitable when the app is hosted online. Ive considered manually listing the client ip addresses in apache to block access from other machines.</p>
  
  <p>Is there anything else i can do to make access secure? Certificates maybe?</p>