Add list of security holes

README.md

@@ -27,3 +27,8 @@ A school event planner and timetable
 - [ ] Display events as calendar
 
 - [ ] Create sample data
+
+## Security Pitfalls 
+
+- Auth mechanism not verified
+- Succeptable to insecure direct object references

server/database.js

@@ -1,5 +1,6 @@
 import mysql from 'mysql';
 import semver from 'semver';
+
 import { fatal, getVersion } from './utils';
 import { NotFoundError } from './errors';
 

server/index.js

@@ -1,5 +1,6 @@
 import path from 'path';
 import express from 'express';
+
 import Database from './database';
 import API from './api';