-
Notifications
You must be signed in to change notification settings - Fork 24
Open
Description
The current system stores passwords in plain text, which is a significant security risk. You should implement PHP's native password hashing.
File to edit: project-red-stream/register.php
Action: Update the password variable to use a hash before saving to the database.
Code Change:
$password = password_hash($_POST['password'], PASSWORD_DEFAULT);
File to edit: project-red-stream/login.php
Action: Replace the direct SQL password check with password_verify().
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels