lucatacconi / crunz-ui

Natural graphical user interface for Crunz (Crunzphp/Crunz). Allows users to setup tasks natively written in PHP and schedule them configuringing date and time of start, intervals and conditions of init and execution.
MIT License
12 stars 0 forks source link

Increased security in the application #25

Open flagellarmirror opened 1 year ago

flagellarmirror commented 1 year ago

problem I saw that in the authentication process the password is only encrypted using the md5 algorithm without any salt or key, this makes the password easily decryptable in transit.

solution I suggest adding an encryption key that remains constant when using md5 in app-side and server-side, this will make decryption more difficult.