Security - ac486/IS421 GitHub Wiki

CSRF

Cross-Site Request Forgery is the main issue to be dealt with in securing the site. Prevention of malicious scripts from accessing the site will include the hidden form field honey pot method as well as hashed password authentication.

Honey Pot

The Honey Pot system will include tricking scripts and other non-human entity from attacking the site. The registration form will include an extra form field that is invisible to the normal user. If scripts and other bots are scanning the site for form fields to fill out, this null field will be activated and the registration will be canceled out.

Password

The passwords will be protected by a hashing algorithm. Each password will have its own unique one way hash that will be stored on the site and not the password itself. Once the user creates a password, the hash is saved on a file. when the user logs into the website, the password entered will be hashed and matched with the hash on his/her account. This form of security allows for passwords to be safely saved so that if a password file is compromised, the hashes mean nothing to the without the specific algorithm.

Minimum of at least 6 characters will be required from the user.

⚠️ **GitHub.com Fallback** ⚠️