Hi there,
May I ask how and where you are storing user information (e.g. usernames and passwords)? I don’t really like signing up for community projects not knowing if they have put information security and privacy first.
I can’t @khalby786 as the server part contains encoding algorithm. However, you can use inspector anytime for the client side vue code.
Also, I’m not using Vue on server-side
Well @EddiesTech, I store the usernames and passwords in sqlite db. The passwords are encoded first and then stored. The encoding isn’t as simple as atob / btoa encoding.
Can you let us know the exact method? As we have said many times on this forum, you should be using a hashing and salting methods. I assume you are doing so.
I’m not using hashing / salting, as I was not aware of the fact that it is compulsory. Perhaps, I’m not much active on the forum. I think, I must implement it.
However, I’m using many cycles (~50) of encoding and string manipulation.
It’s not compulsory, but it’s the best method and really simple to set up (e.g. bcrypt uses hashing and salting) or you could use @ihack2712’s own library which supports a wide variety of methods
encoding doesn’t really help as it can be decoded. Encoding is even less secure than encryption (which btw shouldn’t be used either). Encoding and decoding happens without a key.
Hashing and salting should be used, as Eddie recommended your can use either bcrypt or my very own idiot proof hashing library:
const { hash, test } = require("ihacks-hash");
const passwordHash = hash("sha512", "my password", undefined, 1000);
const isPasswordValid = test(passwordHash, "my password");
if (isPasswordValid) console.log("Password is valid!");
else console.log("Password isn't valid!");
I agree with all the things you and @EddiesTech had said, but I can’t find some quickest way to update passwords in table. Do I have to use update command for taht?
How come you thought I’m using a file @EddiesTech ? A file can be easily viewed like “example.glitch.com/filename.txt”.
I’m using sqlite3 npm module. And, now I want to know how to update the passwords (encoded -> hashed), apart from using update sql cmd?
Thanks for your help @ihack2712 . I’m currently working on an unstable beta version (which is preview of future updates) and I’m going to check this out there. I’m pretty sure this will do the job
Hey @rnss, I forgot to mention that you’ve to add a solution yourself to cross-verify your tests. Without the code, you would not be able to see the submit button.
Lightweight and fast rendering based on Vue.js
:
dark mode is live…