search

natew / obtvse

Deprecated: See natew/obtvse2
http://github.com/natew/obtvse2
MIT License
1.38k stars 261 forks source link

Security issues... #92

Closed ndreckshage closed 12 years ago

ndreckshage commented 12 years ago

I think the simple http authentication should be replaced with a more secure system -- possibly authlogic https://github.com/binarylogic/authlogic/

additionally, example.html/admin is the number is the number 1 place someone would try and crack. maybe instead of /admin it could be /login as defined in config.yml

I'll work on incorporating this into a fork, but just wanted to mention it as issue...

lenaschoenburg commented 12 years ago

If I find the time, I want to add authentication and authorization support with devise.

ndreckshage commented 12 years ago

added devise https://github.com/NateW/obtvse/pull/94