5 ms·
Nevermind session management. The real question is: Why does the publicly accessible booking website have access to the passenger manifest of the aircraft at al
by run4yourlives 14y ago
Nevermind session management. The real question is: Why does the publicly accessible booking website have access to the passenger manifest of the aircraft at all?
In what possible way could knowing who the other people on the flight are benefit an individual booking a seat?
This is sloppy, sloppy coding; probably a result of some poor schmuck pulling an all nigher or two because the somebody promised an unrealistic deadline.
- primatology 14y agoAgreed it's sloppy coding. Here's my guess: it's probably because you can have multiple people on one reservation. Each passenger on the flight gets an ID, and each reservation contains the IDs of the involved parties. Invalid reservation ID? List all the passengers, obviously!
- run4yourlives 14y agoSadly, you're probably pretty close to the actual error there.
- joelhaasnoot 14y agoWhatever happened to returning null?
- eli 14y agoNull means "match all" -- everyone knows that!
- azov 14y agoWell, you need a list of seats occupied by all other passengers so that you can pick yours. The names probably happened to be in the same data set (and yes, of course it's sloppy coding).
- run4yourlives 14y agoThe "seat" object though is not connected to knowing "who" is in that seat, only that it is full. As in "if seat.isoccupied()" At no time should the passenger object be visible to perform a new booking. I see where you might need it if you are changing a reservation, but again this shouldn't in any way be linked to the passenger manifest.
- tptacek 14y agoMaybe they want to be able to verify, across multiple sessions, that multiple seats aren't occupied by the same person, or to potentially be able to visually indicate that someone has multiple seats. Obviously you can easily design a schema that does that without including the names of other passengers, but that schema would be idiosyncratic to that one purpose.
- run4yourlives 14y agoWhich leads to: why in the hell does your schema allow for a passenger to occupy more than one seat at a time?
- tsuraan 14y agoSome people don't fit in a single seat?
- run4yourlives 14y agoWouldn't that be better accomplished with two passengers with the same name? You aren't getting that second seat for free! :-)
- sukuriant 14y agoWhat happens if the two seats aren't adjacent? :O
- jonknee 14y agoYou can also check-in on the website. It's not surprising that the app has access to passenger names.
- hammock 14y agoMy first thought was that it's not the manifest, it's the list of everyone who is currently logged into the site. That would make more sense to me.