Skip to content

Fix SQL Injection Vulnerability in Login and Signup (Issue #554) - #9039

Open
armanpanigrahi59 wants to merge 19 commits into
JhaSourav07:mainfrom
armanpanigrahi59:fix-sqli-login-signup-554
Open

Fix SQL Injection Vulnerability in Login and Signup (Issue #554)#9039
armanpanigrahi59 wants to merge 19 commits into
JhaSourav07:mainfrom
armanpanigrahi59:fix-sqli-login-signup-554

Conversation

@armanpanigrahi59

Copy link
Copy Markdown
Contributor

Description

Fixes #554

Pillar

  • 🎨 Pillar 1 — New Theme Design
  • 📐 Pillar 2 — Geometric SVG Improvement
  • 🕐 Pillar 3 — Timezone Logic Optimization
  • 🛠️ Other (Bug fix, refactoring, docs)

Visual Preview

Checklist before requesting a review:

  • I have read the CONTRIBUTING.md file.
  • I have tested these changes locally (localhost:3000/api/streak?user=YOUR_USERNAME).
  • I have run npm run format and npm run lint locally and resolved all errors (CI will fail otherwise).
  • My commits follow the Conventional Commits format (e.g., feat(themes): ..., fix(calculate): ...).
  • I have updated README.md if I added a new theme or URL parameter.
  • I have started the repo.
  • I have made sure that i have only one commit to merge in this PR.
  • The SVG output matches the CommitPulse "premium quality" aesthetic standard (no raw elements, smooth animations, correct fonts).
  • (Recommended) I joined the CommitPulse Discord community for contributor discussions, mentorship, and faster PR support.

@vercel

vercel Bot commented Aug 15, 2026

Copy link
Copy Markdown
Contributor

@armanpanigrahi59 is attempting to deploy a commit to the jhasourav07's projects Team on Vercel.

A member of the Team first needs to authorize it.

@retenta-bot

retenta-bot Bot commented Aug 15, 2026

Copy link
Copy Markdown

This PR fixes a critical SQL injection issue in the login and signup processes, which is essential for maintaining the security of our application. It's important to ensure that all user inputs are properly sanitized to prevent potential exploits. Additionally, please refer to the past decision regarding the enhancement of tech stack contribution analysis, which emphasizes the importance of security and analytics in our development process. Thank you for your contribution, and I look forward to your updates!

@retenta-bot retenta-bot Bot changed the title Fix sqli login signup 554 Fix SQL Injection Vulnerability in Login and Signup (Issue #554) Aug 15, 2026
Comment thread app/api/auth/login/route.ts Fixed
Comment thread app/api/auth/signup/route.ts Fixed
@github-actions github-actions Bot added the status:blocked This PR is blocked due to a failing CI check. label Aug 15, 2026
@github-actions github-actions Bot removed the status:blocked This PR is blocked due to a failing CI check. label Aug 16, 2026
@github-actions

github-actions Bot commented Aug 16, 2026

Copy link
Copy Markdown
Contributor

📦 Next.js Bundle Size Report (Gzipped Sizes)

Asset PR Size Base Size Difference Status
static/chunks/3952-[hash].js 7.84 KB 7.80 KB +0.04 KB (+0.54%) 🔴 Regression
static/chunks/app/(root)/dashboard/[username]/page-[hash].js 57.87 KB 59.52 KB -1.65 KB (-2.78%) 🟢 Improvement

📊 Summary of Totals

Category PR Size Base Size Difference
Total JS 4997.79 KB 5005.04 KB -7.25 KB (-0.14%)
Total CSS 354.80 KB 354.80 KB 0 B

@Aamod007 Aamod007 added mentor:Aamod007 type:security Security fixes, dependency updates, or hardening level:critical High-priority or mission-critical contributions affecting core systems, security, or infrastructure labels Aug 16, 2026

@Aamod007 Aamod007 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks like this PR contains unrelated commits (Docker builds, validation fixes) and I don't see any SQL injection fix in the actual code diff. Could you please double check your branch and make sure it only contains the relevant fix for #554?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

level:critical High-priority or mission-critical contributions affecting core systems, security, or infrastructure mentor:Aamod007 type:security Security fixes, dependency updates, or hardening

Projects

None yet

Development

Successfully merging this pull request may close these issues.

bug: sqli vulnerability

3 participants