InsiderPhD / Generic-University

Vulnerable API
381 stars 101 forks source link

Password change doesn't encrypt #43

Open SalfordJY opened 1 year ago

SalfordJY commented 1 year ago

After changing the password within GraphiQL, the password changes fine(fig1). But re running the query to return user data, the password isn't encrypted(fig2). There for not possible to used the new credentials to log in. This was also checked by katie within the my SQL database and the passwords are all unencrypted. fig1: image fig2: image fig3: image