Skip to content

Security: Password Hashing #2

@codeCraft-Ritik

Description

@codeCraft-Ritik

The current system stores passwords in plain text, which is a significant security risk. You should implement PHP's native password hashing.

File to edit: project-red-stream/register.php

Action: Update the password variable to use a hash before saving to the database.

Code Change:
$password = password_hash($_POST['password'], PASSWORD_DEFAULT);

File to edit: project-red-stream/login.php
Action: Replace the direct SQL password check with password_verify().

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions