Hello,
Let us breakdown our previous replies for you: once our server gets the "plaintext" password over
HTTPS it is then encrypted with BCRYPT with a cost price of 12 to get stored into a database that is not linked to the wallet and looks something like this:
$2y$10$.vGA1O9wmRjrwAVXD98HNOgsNpDczlqm3Jq7KnEd1rVAGv3Fykk1a ) and therefore impossible for us intercept your original password and as per our previous replies client-server communication is encrypted as per
TLS so your password is never actually exposed to us.
Below is image to show all necessary encryption is in place!

That being said and moving on to your second question "We use SQL injection filters to prevent CSRF attacks […]” I have answered this in post in #7 however i will break it down for you.
Our custom build framework has built in CSRF AND SQL injection filters in place additionally to that we store CSRF tokens in a cookie named “SENDBIT_SECURE_SESSION” you can verify this by going over to
https://sendbit.io and click on the lock icon next to the URL input, Open the cookies folder and this should be visible to you.
You should consider looking into key/iv pair using EVP, with a dynamic number of rounds this will better your understanding on wallet.dat file encryptions.
All inputs are cleaned by our server-side "Request::cleanInput($input)” before anything is transmitted to the database we hope this answers your questions in regards to private keys, passwords, CSRF and SQL injections.
In our upcoming update we are going to intorduce JSON rpc calls to rpc.sendbit.io so you can access your wallet instance remotely this will be useful for many people and here are some benefits
No Blockchain Download - Save on bandwidth and disk space.
No Need to run Bitcoind - Some VPS and shared hosting plans do not allow you to run custom processes
./bitcoin-cli -rpcconnect=rpc.sendbit.io -rpcport=443 -rpcssl -rpcuser=Wallet-UUID -rpcpassword=YourPassword getinfo
{
"balance" : 437.50100000,
"errors" : "",
"paytxfee" : 0.005,
"proxy" : "",
"connected" : 0,
"testnet" : false,
"difficulty" : 1733207.51384839,
"blocks" : 179602
}
And HAPPY

Halving
Regards
Sendbit.io