- Users can register and log in to website.
- Registered users can add/edit/delete their events.
- Registered users can share their events to two different registered users.
- Users can remove themselves from an event that someone else created and shared to them, to prevent event invite spamming.
- Website prevents XSS attacks by sanitizing JSON data on the client side.
- Website prevents SQL injetion attacks with prepared queries.
- Website passes tokens in forms to prevent CSRF attacks.
- User password information is salted and hashed when stored in SQL database.