Skip to content

Security: User passwords are unhashed #21

@PavanCodes05

Description

@PavanCodes05

Problem

While I was working on the PR #20, I came across this security issue where the passwords are stored in as plain texts rather than being hashed, Which could potentially lead to security issues. Currently we just rely on HTTPs for the protection, If the db is compromised somehow we could potential lose out the user credentials

Solution

We could raise an issue and work on this security feature by including hashing techniques to keep our site up and running in more secured way.

Potential Issues

I can think of a potential issue when we try to migrate from plain texts to hashed passwords in db, Since existing users creds are all in stored as unhashed fashion, could be a bit of a challenge to resolve this new migration.

I am ready to work on this issue myself @Ashrockzzz2003, Kindly assign this issue to me if you think of including this feature/fix.

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions