Raymart DG

Possible solution for this is here https://github.com/tramyardg/hotel-mgmt-system/commit/905ac507ada5be5bf8cdde0f0473e5588877f861 How can I reproduce this vulnerability? If you try accessing the path with postman http://hotel.local/app/process_update_profile.php, it will redirect you to the 404 page...

I updated the code to check for reserved words both in the front-end and the backend. I also use pdo and protected it with cookie and PHP **session** variable. In...

Hi @youyou-pm10 I am closing this issue now, I made several commits to address this issue. Validate again on your side, if issue persist , open this issue. 

@jason8098 you do not need to, just login using one of the admin user `[email protected]` and password `admin`