3 ms·
My dear friend, since it is Valentine's Day, I say this with a lot of "heart" and love for you and your partner/friend: I am not a security expert but security
by autalpha 16y ago
My dear friend, since it is Valentine's Day, I say this with a lot of "heart" and love for you and your partner/friend:
I am not a security expert but security is a very important issue. I am not sure what framework you're using (most likely no framework), but being anonymous AND able to post as ANYONE is a serious issue (well, your user list only goes up to about 6 people--0 being unknown and 1-5 are somewhat real users; user # 4 user is deleted perhaps). One thing you can do is to check if the user posting is actually authenticated and really who s/he claims to be.
Your infrastructure is too fragile and amateurish. Obviously, haters are gonna hate, but believe me when I say, this hurts me more than it hurts you. Take (all) your apps down and then do a security audit on all of them before you hurt yourself.
Happy Valentine's Day.
- wesleyzhao 16y agoThanks for pointing out the security flaw! As of now, I believe it has been patched up. No user should be able to post as anyone else but themselves at this point (or anonymous). If this is not true, someone feel free to drop be an embarrassing "favorite thing"