Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
noapiforyou
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
4 ms
·
1.
▲
by
noapiforyou
12y ago
Oh, man... I work at a "startup" where all the AJAX requests, even the ones that write to the database, are completely unauthenticated. Everything is PHP files in the webroot, which means of course they're one malicious POST