Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> As far as I can remember it did most/all of its access controls via JavaScript

Hahahaha. If you are going to use db credentials, for the love of the gods, at least consider using the db to enforce access controls...... That's just common sense, IMNSHO....



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: