search

mikaelstaer / The-Secretary

http://www.secretarycms.com
GNU General Public License v3.0
88 stars 22 forks source link

Security fixes: Created secure session management, password hashing w… #5

Closed bellizzij closed 8 years ago

bellizzij commented 8 years ago

…ith salt and removed SQL injection vulnerability

mikaelstaer commented 8 years ago

Amazing. I was going to sit down today and figure this out - thanks so much.

bellizzij commented 8 years ago

Please note, some fixes with regards to password hashing will require PHP version > 5

mikaelstaer commented 8 years ago

Just realized - AJAX calls require a fix too. Projects module/update.php for example. I'm looking into this now.

Mikael Staer Nathan www.mikaelstaer.com www.staernathan.com 647 240 8685

On 23 February 2016 at 10:22, bellizzij notifications@github.com wrote:

Please note, some fixes with regards to password hashing will require PHP version > 5

— Reply to this email directly or view it on GitHub https://github.com/mikaelstaer/The-Secretary/pull/5#issuecomment-187739338 .

mikaelstaer commented 8 years ago

Fixed - session_start() needed to be added to launch.php in AJAX section.

Mikael Staer Nathan www.mikaelstaer.com www.staernathan.com 647 240 8685

On 23 February 2016 at 10:39, Mikael Staer Nathan mikaelstaer@gmail.com wrote:

Just realized - AJAX calls require a fix too. Projects module/update.php for example. I'm looking into this now.

Mikael Staer Nathan www.mikaelstaer.com www.staernathan.com 647 240 8685

On 23 February 2016 at 10:22, bellizzij notifications@github.com wrote:

Please note, some fixes with regards to password hashing will require PHP version > 5

— Reply to this email directly or view it on GitHub https://github.com/mikaelstaer/The-Secretary/pull/5#issuecomment-187739338 .

bellizzij commented 8 years ago

Yes I forgot to merge that!