cslug/cslug-site — Issue #2: passwd file security risk
Author: kalivos
Created: 2012-02-02 21:28:24+00:00
State: open

Passwords should be stored in a database (and off github). It's great that the password is hashed, but it needs to be salted in order to prevent rainbow table lookups. Ideally, you want to use a different salt for every user.