3 ms·

I'm not interested in any paid work. I'm trying to say that your entire server is vulnerable to hacker attacks right now. It seems strange that you posted a vul

I'm not interested in any paid work. I'm trying to say that your entire server is vulnerable to hacker attacks right now. It seems strange that you posted a vulnerable website on Hacker (!) News... Or do I need to post my message on the index page of your site for you to get how critical the vulnerability is? If so, which one? Updrop.it, torrbin.com or noteworthyfacts.com?

devbob 11y ago
No problem, its an mvp, looks like I need to hire a dev!, thanks.
- plugnburn 11y ago
  So Updrop wasn't made by you and you hired a dev to create it?
  - devbob 11y ago
    A bit of both, Im just learning backend, so feedback is appreciated a lot
    - plugnburn 11y ago
      So that's my feedback: at least remove the ability to upload PHP files onto Updrop. And then disable PHP for upload folder altogether.
- deleted 11y ago
  [deleted]
- deleted 11y ago
  [deleted]
- fiatjaf 11y ago
  That's crazy. Are you going to HIRE A DEV for fixing a proof-of-concept app like this? Stop. This is where you should be learning to do things, not hiring a dev for writing such simple small apps for you. Since you're learning right now, find a framework (best if not PHP, but it can be a PHP framework) and follow the tutorial. You'll learn some "backend", and you'll learn it with best practices and with things in the right place.