Update README.md

Yikes, This code does not look secure,
This commit is contained in:
buckaroo-labs 2023-12-21 12:10:20 -08:00 committed by GitHub
parent 029ecfb692
commit a1257b8fdf
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -4,6 +4,11 @@ SemanticScuttle is a social bookmarking tool experimenting with new features lik
* bring app compatibility up to PHP 8.2 (for at least the MySQL/mysqli database option, possibly others), avoiding the "Deprecated" messages under PHP 8.2 that will be the "Fatal Error"s of a future PHP version; * bring app compatibility up to PHP 8.2 (for at least the MySQL/mysqli database option, possibly others), avoiding the "Deprecated" messages under PHP 8.2 that will be the "Fatal Error"s of a future PHP version;
* correct broken links in the documentation; and to * correct broken links in the documentation; and to
* bundle a responsive theme (forked from [sscuttlizr](https://github.com/jonrandoem/sscuttlizr)) with minimal features, designed for cases in which this app is embedded in a larger system. * bundle a responsive theme (forked from [sscuttlizr](https://github.com/jonrandoem/sscuttlizr)) with minimal features, designed for cases in which this app is embedded in a larger system.
* secure the application (see warning).
## Warning
There is no warranty, explicit or implied, regarding the security of this application. No security testing has been performed, but a visual review reveals deeply concerning code practices. The associated risks may be mitigated by turning off anonymous editing and user registration capabilities after a single administrative user has been created, and/or not exposing the application to the internet.
## Features ## Features
* LDAP/Active Directory authentication * LDAP/Active Directory authentication