User's password is saved to db directly without encryption
xzyaoi opened this issue · comments
I'm using it with Vagrant and I fount it saved user's password without encryption.
Is it a bug?
@stevefermi yes. you are right. I will apply hashing algorithms like 'bcrypt' on the password and stores it
@stevefermi now the password has encrypted