Hi, I won the idiot of the month award! I designed a quick admin page for a site. Since it was for quick administration, I didn't add much security. I just gave the page an odd name, and never added any links to the site. The really big mistake was that I added a link that would let me delete elements on the page. Anyway, I accessed the page with a computer that was running Alexa. Anyway, apparently decided to run a scan of the admin page. It dutifully executed all of the delete links.
Fortunately, I have current backups. But I still deserve a whack upside the head for my short sighted design.
Lesson learned. Never have anything on a web page that performs a database operation as the result of a click.
On the commercial side, I added a silly ad page for Surplus Computers. I doubt it will save me from my financial doom. See, I proved that I am a fool. I need money to be parted from!
No comments:
Post a Comment