Issues

• update for phpsec.owasp.org?

  OWASP/phpsec#120 · Filter by author enygma opened on Nov 30, 2015
  39

• [SECURITY] phpsec user system XSS

  OWASP/phpsec#119 · Filter by author AndrewCarterUK opened on Nov 26, 2015

• [SECURITY] phpsec/user.php - Passwords converted to lower case before hashing

  OWASP/phpsec#118 · Filter by author AndrewCarterUK opened on Nov 26, 2015

• [SECURITY] phpsec/user.php - Timing attack on hash comparison

  OWASP/phpsec#117 · Filter by author AndrewCarterUK opened on Nov 26, 2015

• [SECURITY] phpsec/random.php - Fallback CSPRNG is not CSPRNG

  OWASP/phpsec#116 · Filter by author AndrewCarterUK opened on Nov 26, 2015

• [SECURITY] phpsec/random.php - mcrypt isn't properly error checked

  OWASP/phpsec#115 · Filter by author AndrewCarterUK opened on Nov 26, 2015

• [SECURITY] phpsec/random.php - CSPRNG isn't properly error checked

  OWASP/phpsec#114 · Filter by author AndrewCarterUK opened on Nov 26, 2015

• [SECURITY] phpsec/random.php - CSPRNG isn't used when available

  OWASP/phpsec#113 · Filter by author AndrewCarterUK opened on Nov 26, 2015