Secure Coding Review

CodeAlpha Cyber Security Internship - Task 3

This project demonstrates a secure coding review of a Python Flask application.

Vulnerabilities Identified

• Hardcoded Secret
• SQL Injection
• Weak Password Hashing
• Missing Input Validation
• Information Disclosure

Security Improvements

The secure implementation uses:

• Parameterized SQL queries
• Environment-based secret management
• Secure password hashing
• Input validation
• Safe error handling
• Debug mode disabled

Tools Used

• Python
• Flask
• SQLite
• Bandit
• Manual Code Review

Security Testing

Bandit was used for static security analysis.

Result:

No issues identified.