Reply to thread

"This CMS is completely safe because it contains no flaws like XSS or SQL."


Its not safe. you are using md5 for password encryption. md5 can easily be cracked. use bcrypt or even better use argon.

also dont store user passwords in sessions. also xss is possible in your cms. you need to escaped every data before printing to html


you might also want to check out psr standards because your code is a mess.


Top