search

sruupl / batflat

Lightweight, fast and easy CMS for free. Bootstrap ready. https://batflat.org
MIT License
135 stars 54 forks source link

Security issue #70

Closed patmin closed 4 years ago

patmin commented 4 years ago

There is a big security-issue. The only thing you need is to download the database and open it with notepad. You can view all users and all hashed passwords.

klocus commented 4 years ago

Database file is protected by .htaccess.

https://github.com/sruupl/batflat/blob/master/.htaccess#L4