Site security
2025-03-05 03:43:19
Gabriel LeeVanec
Everyone likes their websites secure, especially if those websites use any form of dynamic content. For example, you wouldn’t like your YouTube channel to be used by a random person just because they guessed your password. It’s the same with us.
You can notice that even if you have an account with us, you can’t do anything. You can have a profile picture and that’s about it - so why profiles?
Simple: when I upload a post, I just fill some fields in a database. That includes this post here. And you can either do that with a direct manipulation with the database, which is fun, but requires a direct SSH connection to the server, or you can fill a form on the web. So, we have the latter one.
You don’t see it, because it’s unlisted, but it’s here. It allows me - and a few other people - to post on this site from anywhere we log in from, be it a phone, laptop or a desktop. There are two types of accounts, those who can post and those which can not. And you can comment, even if you have an account that cannot post - well, you could, if we actually had the comment system working, but you get the idea why we have accounts.
Now, this value is set internally and it cannot be changed from the web. However, you could notice that for most of the time my account was around, it was named “test” and the email was “[email protected]”.
Can you guess the password? Yes. It was also “test”.
I changed it now, so you can’t use this info for anything, but I find it funny enough to let you know. And anyone could come to the address leevanec.net/projekty/upload and upload anything. Luckily, no one ever did figure out the password.
You can still go there now. It will let you fill out the form no problem, but keep in mind that it checks if you can post anything AFTER you click “Upload” - so it just won’t work anyway. I plan to update this system to finally include a field for an English and Czech versions separately so I don’t have to… well, that’s a post for another time.
Oh yeah, one more thing. I think I’ll work on this place a bit more now.
![[alt text]](/resources/img/placeholder.jpg)
Comments here! I mean, they can be very long and use some html syntax. but let's make sure
2024-03-28
Gabu Lívanek