(12-23-2015, 12:38 PM)skunkbad Wrote: There are some pretty major authentication issues. To your credit, you've only said that this is "basic authentication". It might be more helpful to provide a more robust authentication. Yes, it's nice to give a newbie something to start with, but you don't want them to have the impression that websites they make for themselves or other people are reasonably safe by using what you've provided.
Thanks for chiming in! Ironically, I did consider including Community Auth but felt it was just too much for this project, which is in fact why I went with a salted sha512 hash. I wouldn't necessarily use the words 'major issues'... since as you validated, this isn't intended for enterprise level applications. I'm am curious, though. What would you suggest to beef it up a little more? Crypt perhaps? I'm certainly open to any suggestions. Would you consider forking it and contributing?
Jason B.
