sysstas / ccback

2 stars 1 forks source link

Storing admin passwords ad plain text #1

Closed MEGApixel23 closed 5 years ago

MEGApixel23 commented 6 years ago

It's very unsafe to store passwords or any security sensitive information in an open format. Consider using bcrypt, sha algorithms.

Example

sysstas commented 5 years ago

SOLVED. I get rid of "admins" table. Insted of it now I store users info in "users" table which have "isAdmin" field and password hash encrypted by bcrypt.