EE login credentials to existing system

Hi!

I were able to use EE members credential to login to my existing system which is built in CodeIgniter already. Actually no-sweat but I wonder if there are issues concerning security with my implementation.

This is what I did. I called EE db and exp_member table (default of EE). (This might have been overwritten during your installation just in-case you are reading my post.) I called the exp_member table then queried email as my login-id (it can be also the username) and the password using SHA1. That is it, whallaaahhh, I am already logged-in to my existing system.

Any feedbacks? Are there security issues or whatsoever issue about it?

best regards, Jay

Moved to Development and Programming by Moderator