Yeah, and perhaps I'm a lobster pretending to type on a keyboard. The guy was a fucking moron. The user database was a flat file array stored, unencrypted, pa

Yeah, and perhaps I'm a lobster pretending to type on a keyboard. The guy was a fucking moron. The user database was a flat file array stored, unencrypted, passwords and all, in users.js. I told him that was a huuuge security hole, and he said "What, you think hackers are just going to browser through our source code, looking for anything worth stealing?" The entire store database- users, products, orders, etc, were stored in flat JS arrays, and all of them were downloaded to the user's browser so the store could run client-side, "because then our site can scale infinitely since we're only serving static files!". Only the credit card transactions were transmitted to our server. Thank god he knew better than to store credit card info, because our entire array of servers (that he was in charge of) were hijacked by russians and turned into warez FTP sites.