[Vulnerability] SQL-Injection

[thefLink]

Hey, your file 'class.user.php' is vulnerable to sql injection as you pass the parameters directly and unfiltered in the sql queries. Like this your 'authentication system' does not provide any authentication and is easy to bypass. I would suggest you use prepared statements in order to mitigate this vulnerability.

As a POC register any user and login in like: username: themail'# password: anything

Cheers, flink

[ashawkat]

Hi @thefLink, As you can see this one is really very old & I did this because the people would love to checkout the easiest way. If you want to contribute then you can push your changes I'll revise everything & merge that. I haven't used any sort of validation here. Just done this so that a newcomer can easily understand how this login & registration actually works. Thanks again.