search

mihai-vlc / master-login-system

An advanced login system build upon bootstrap with lots of features built in.
128 stars 94 forks source link

password insecure #28

Open mctrivia opened 7 years ago

mctrivia commented 7 years ago

You are using sha1 to protect passwords. this is easily hacked.

to secure passwords you need to use password_hash

mihai-vlc commented 7 years ago

This project is no longer maintained and I'm not doing too much php these days. Do you happen to know of any alternatives that I can link in the readme file ?

ScottDonor commented 7 years ago

heres the php manual for it http://php.net/manual/en/function.password-hash.php ionutvmi, can i fork this to work on it myself? not specifically the password issue, but in general

mihai-vlc commented 7 years ago

@ScottDonor sure you can. It's open source. If you are interested I can even give you access to continue the development on this repo (or post a link to your repo if you decide to maintain it long term).