search

dmeese / MathWorld

Team Bunny Slippers Math World Web Application
0 stars 1 forks source link

weak passwords allowed #5

Closed enasni closed 11 years ago

enasni commented 11 years ago

The only requirement for a password is that it be 6 characters in length. Being designed as a web-facing entity you might want to implement stronger password requirements.

Ruby module exist for this already , for example: http://raa.ruby-lang.org/project/ruby-password/

CKinWoodstock commented 11 years ago

In progress

CKinWoodstock commented 11 years ago

enasni:

You have been awarded one bug bounty point for finding this issue.