Back to Home
callebescos icon

esic-mcp-courses

by callebescos

Overview

A web server for managing educational courses, likely involving user authentication and database interaction for course content.

Installation

Run Command
npm start

Environment Variables

  • PORT
  • DB_HOST
  • DB_USER
  • DB_PASSWORD
  • DB_NAME
  • DB_PORT
  • COOKIE_SECRET_KEY

Security Notes

CRITICAL: A hardcoded secret ('your-secret-key') is used for `cookie-parser`, making session cookies vulnerable to hijacking if the secret is exposed. While login uses parameterized queries for SQL injection prevention, this is a significant flaw. No explicit CSRF protection or comprehensive input sanitization for all routes is visible in the provided snippets, which are common web application security oversights.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassLow
Stars0
Forks0
Last Update2025-12-02

Tags

Node.jsExpressPostgreSQLWeb ServerEducation