dapp-authentication
dapp-authentication copied to clipboard
Mistakes or issues?
what the point of this check?
require(user[_address].addr != msg.sender); link
I can call the method from a 0x1 address with 0x2 in args. The main codition is - caller address does not have to match with an existed address. I can rewrite any use data and save any data.
Also what the point of this contract if in anyway we can see transactions where all txs arguments are visible, such as string password. Almost all methods are available to any user. Full node also can manually access to the blockchain data and see all details.
I forget to update the repo. have you done the change then send the PR.
I will update it