paul
f39427d9d9
- Scan for hardcoded secrets and credentials - Check SQL injection vulnerabilities - Audit authentication and authorization flaws - Analyze XSS vulnerabilities - Review file upload security - Check security headers and CORS configuration - Verify npm dependencies (0 vulnerabilities found) Critical findings: - Hardcoded JWT secret fallback - SQL injection in adminDashboard.js - Stored XSS in CMS content - Authentication bypass risks Report includes detailed findings and remediation steps. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
Photo Sharing Platform
A secure, self-hosted photo sharing platform designed for weddings and events. Features automatic expiration, email notifications, and simple file-based management.
Features
- 🔒 Password Protected Galleries
- ⏰ Automatic Expiration
- 📧 Email Notifications
- 📁 Simple File Management
- 📊 Analytics Integration
- 🎨 Customizable Themes
- 📱 Mobile Responsive
- ⚡ Docker Ready
Quick Start
- Clone the repository
- Run
./scripts/install.sh - Configure
.envfile - Setup SSL:
./scripts/setup-ssl.sh - Start:
docker-compose -f docker-compose.prod.yml up -d
Default credentials: admin / admin123 (change immediately!)
Documentation
See DEPLOYMENT.md for detailed deployment instructions.
License
MIT License