search

scorelab / OpenDF

Digital Forensics project
Apache License 2.0
57 stars 90 forks source link

Add hashing for credential storage #42

Open kasunbalasooriya opened 8 years ago

kasunbalasooriya commented 8 years ago

Currently the username and passwords are stored as plain text in the database. (except in the first instance when the administrator is created). The passwords can hashed and salted. (a separate table has to be created to store the salts)

agentmilindu commented 8 years ago

Yes Kasun, we have to fix this. We can use bcrypt password hashing as @lucasjones did in #24