Don't store plain text confirmation codes in database (use hash)

CRModders / cosmic-mod-manager

A website for the hosting of mods, resourcepacks, and shaders for cosmic reach.

http://www.crmm.tech

GNU Affero General Public License v3.0

7 stars 5 forks source link

Closed Abhinav5383 closed 3 weeks ago

realeatham commented 3 weeks ago

Prolly use a salted hash for this as numerical code hashes have probably been pre computed

Abhinav5383 commented 3 weeks ago

Yeah, I already do that for session tokens