Understanding Session & Account Security
How Art Show Hub protects your account with session management, CSRF tokens, and encryption.
Session & Account Security
Art Show Hub employs multiple layers of security to protect your account and data. Here is an overview of the key measures in place.
Password Encryption
All passwords are hashed using bcrypt, an industry-standard algorithm. Your password is never stored in plain text. Even Art Show Hub staff cannot see your password.
Session Management
- Sessions are regenerated on login to prevent session fixation attacks
- Session cookies are set with the HttpOnly flag, so JavaScript cannot access them
- Cookies use the Secure flag when served over HTTPS
- Sessions expire after a period of inactivity
CSRF Protection
Every form submission includes a CSRF token that verifies the request originated from the actual Art Show Hub page. This prevents cross-site request forgery attacks.
Security Headers
The platform sends security headers including:
X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINReferrer-Policy: strict-origin-when-cross-origin
Best practices: Use a unique, strong password. Do not share your login credentials. Log out when using shared computers.