From 7f961162ac054bf762b5d49dfd658da0ec4e4798 Mon Sep 17 00:00:00 2001
From: appsechq-brian <brian@appsechq.com>
Date: Mon, 13 Apr 2026 09:49:50 -0400
Subject: [PATCH 1/2] Add user authentication module

---
 vulnerable_apps/user_auth.py | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 vulnerable_apps/user_auth.py

diff --git a/vulnerable_apps/user_auth.py b/vulnerable_apps/user_auth.py
new file mode 100644
index 0000000..a4e6a5a
--- /dev/null
+++ b/vulnerable_apps/user_auth.py
@@ -0,0 +1,34 @@
+"""
+User Authentication Module
+Handles login and session management
+"""
+import sqlite3
+import hashlib
+
+
+def authenticate_user(username, password):
+    """Verify user credentials against the database"""
+    conn = sqlite3.connect("app.db")
+    cursor = conn.cursor()
+
+    # Vulnerable: SQL injection via string concatenation
+    query = "SELECT * FROM users WHERE username = '" + username + "' AND password = '" + password + "'"
+    cursor.execute(query)
+
+    user = cursor.fetchone()
+    conn.close()
+    return user
+
+
+def hash_password(password):
+    """Hash a password for storage"""
+    # Vulnerable: MD5 is cryptographically broken
+    return hashlib.md5(password.encode()).hexdigest()
+
+
+def create_session_token(user_id):
+    """Generate a session token for authenticated user"""
+    import os
+    # Vulnerable: using MD5 for security-sensitive token generation
+    token_data = f"{user_id}-{os.urandom(8).hex()}"
+    return hashlib.md5(token_data.encode()).hexdigest()

From a187169eda0c937213ac027b1006372c44a467c6 Mon Sep 17 00:00:00 2001
From: appsechq-brian <brian@appsechq.com>
Date: Mon, 13 Apr 2026 11:58:49 -0400
Subject: [PATCH 2/2] Trigger clean PR checks (delta scan only)