-
Notifications
You must be signed in to change notification settings - Fork 6
Description
Problem
While I was working on the PR #20, I came across this security issue where the passwords are stored in as plain texts rather than being hashed, Which could potentially lead to security issues. Currently we just rely on HTTPs for the protection, If the db is compromised somehow we could potential lose out the user credentials
Solution
We could raise an issue and work on this security feature by including hashing techniques to keep our site up and running in more secured way.
Potential Issues
I can think of a potential issue when we try to migrate from plain texts to hashed passwords in db, Since existing users creds are all in stored as unhashed fashion, could be a bit of a challenge to resolve this new migration.
I am ready to work on this issue myself @Ashrockzzz2003, Kindly assign this issue to me if you think of including this feature/fix.