Skip to content

feat(security): Implement Secure Password Hashing#168

Merged
Eswaramuthu merged 3 commits intoEswaramuthu:mainfrom
VishalRaut2106:security/hash-passwords
Feb 11, 2026
Merged

feat(security): Implement Secure Password Hashing#168
Eswaramuthu merged 3 commits intoEswaramuthu:mainfrom
VishalRaut2106:security/hash-passwords

Conversation

@VishalRaut2106
Copy link
Copy Markdown
Contributor

This pull request updates the authentication logic in app.py to securely store and verify passwords using hashing. It replaces plain text password storage and comparison with hashed passwords for both students and teachers, improving the application's security. Additionally, it makes a minor change to how the database path is defined.

Security improvements:

  • Passwords are now hashed before being stored in the database for both students and teachers during registration using generate_password_hash. [1] [2]
  • Password verification during login now uses check_password_hash to compare the entered password with the stored hashed password for both students and teachers. [1] [2]
  • The necessary imports for password hashing and checking (generate_password_hash, check_password_hash from werkzeug.security) have been added.

Codebase consistency:

  • The database path definition now uses an absolute path for consistency and reliability.This PR introduces secure password storage using Werkzeug's generate_password_hash and check_password_hash. Passwords are no longer stored in plaintext. Existing passwords in ams.db have been migrated.

solves #19

@vercel
Copy link
Copy Markdown

vercel bot commented Feb 10, 2026

@VishalRaut2106 is attempting to deploy a commit to the 007's projects Team on Vercel.

A member of the Team first needs to authorize it.

@vercel
Copy link
Copy Markdown

vercel bot commented Feb 11, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
achievement-management-system Ready Ready Preview, Comment Feb 11, 2026 4:00am

@Eswaramuthu Eswaramuthu merged commit d1143e8 into Eswaramuthu:main Feb 11, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants