🛑 UdrCrafts Observed Issues & Suggested Fixes

[MEHATAJ-PS]

🛑 UdrCrafts Issues & Suggested Fixes

Issue	Location	Severity	Suggested Fix
Admin panel access open	Admin routes	🔴 Critical	Restrict to authenticated admins (RBAC).
Weak passwords	Registration/Login	🔴 Critical	Enforce strong passwords, hash with bcrypt/argon2.
Email validation missing	Registration/Login	🟠 High	Add proper email format validation.
JWT secret hardcoded	Backend	🔴 Critical	Move secret to .env, implement rotation & expiration.
No input validation	Forms/API	🟠 High	Sanitize inputs; use Joi/Zod.
DB queries not sanitized	Backend models	🟠 High	Use parameterized queries / Mongoose validation.
Login inactive	Home panel	🟠 High	Fix login API and token handling.
Latest Collection button broken	Home panel	🟡 Medium	Fix routing/link href.
Footer social links missing	Footer	🟡 Medium	Add correct icons and URLs.
Header/Footer incomplete	Layout	🟡 Medium	Ensure consistent rendering.
Multiple product images not supported	Admin panel	🟠 High	Implement multi-file upload.
Order button missing	Admin panel	🟠 High	Add order management feature.
Mixed concerns / no modularization	Backend	🟠 High	Refactor: separate routes, controllers, services, middleware.
Debugging & onboarding difficulty	Backend	🟡 Medium	Update docs; improve modularity.

---

💡 Suggested Next Steps

• Implement RBAC for admin routes.
• Enforce strong password and email validation.
• Secure JWT secrets and handle token expiration.
• Sanitize inputs and fix DB queries.
• Fix frontend issues (buttons, footer links, header/footer).
• Enhance admin panel (multi-image upload, order management).
• Refactor backend structure for modularity and maintainability.

---