g0d / micro-mvc Goto Github PK

Hello again,

the README claims that micro-MVC has been "Audited for web security & certified by OCTAGON". Is their audit report somewhere available to see?

Thanks

The library incorrectly thinks that a single-element array is a number

var my_vulcan = new vulcan();
var arr = [42];
console.log(my_vulcan.validation.numerics.is_number(arr));

true

Hello! I stubmled upon this project as I was looking for a PHP framework. I noticed that in the auth.php module the passwords as just their unsalted MD5 hash.

This is insecure for many reasons: it is extremely easy to crack MD5 hashes, and leaks information in cases two users have the same password. I recommend you to consult guides such as https://crackstation.net/hashing-security.htm to learn how to securely hash passwords.

Thanks!

thanks for fixing my previous issue but I think the library is still getting some outputs wrong.

For example:

var my_vulcan = new vulcan();
var arr = [[]];
console.log(my_vulcan.validation.numerics.is_number(arr)); // prints true