4 ms·

Hey please shoot me an email if your interested in any paid work, thanks

• DanBC 11y ago
  You need to put your email address in the "about" field of your profile for other people to see it.
• plugnburn 11y ago
  I'm not interested in any paid work. I'm trying to say that your entire server is vulnerable to hacker attacks right now. It seems strange that you posted a vulnerable website on Hacker (!) News... Or do I need to post my message on the index page of your site for you to get how critical the vulnerability is? If so, which one? Updrop.it, torrbin.com or noteworthyfacts.com?
  • devbob 11y ago
    No problem, its an mvp, looks like I need to hire a dev!, thanks.
    • plugnburn 11y ago
      So Updrop wasn't made by you and you hired a dev to create it?
      • devbob 11y ago
        A bit of both, Im just learning backend, so feedback is appreciated a lot
        • plugnburn 11y ago
          So that's my feedback: at least remove the ability to upload PHP files onto Updrop. And then disable PHP for upload folder altogether.
    • deleted 11y ago
      [deleted]
    • deleted 11y ago
      [deleted]
    • fiatjaf 11y ago
      That's crazy. Are you going to HIRE A DEV for fixing a proof-of-concept app like this? Stop. This is where you should be learning to do things, not hiring a dev for writing such simple small apps for you. Since you're learning right now, find a framework (best if not PHP, but it can be a PHP framework) and follow the tutorial. You'll learn some "backend", and you'll learn it with best practices and with things in the right place.