Skip to content
This repository was archived by the owner on Apr 28, 2018. It is now read-only.
This repository was archived by the owner on Apr 28, 2018. It is now read-only.

Some security fixes #1

Description

@valid22
  1. You must check for username if its alpha-numeric.
  2. You must truncate blank or empty spaces on either end of username string
  3. Bcypt password hashing has a limit for maximum no of characters in password, even tho tho it hashes md5 text am pretty sure client has some password limit
  4. PDO Error mode is set true, you didn't catch any error. It's always good to try catch error at very basic step.
  5. There are some columns in db, which are set to not null, so it throws an error while trying to insert a user.(This is a problem most user faces)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions