In PHP/curl I coded a simple login to a WordPress-based website to login to WP from a mobile client (an iOS app). The website supports https, it is hosted in a shared hosting environment and the certificate they offer by default is a common Let's encrypt certificate.
Problem is anything works just fine but, being not a security expert, I don't understand the implications of some basic security settings: eg. by coding
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
am I potentially causing some security issue? And, if so, what could I do?
Any help is appreciated