|
|
|
|
|
by actsasbuffoon
2966 days ago
|
|
It would also be a good idea to search for the hashed version of that user’s password. It’s really bad to leak the unencrypted password when it comes in as a param, but it’s only marginally better to leak the hashed version. |
|