67
Arwym
7y

One of my first jobs as a Web Designer / Developer.

Boss had me update a WordPress site that the previous dude built. It had some pages that only members were meant to access.

These were listed on a navbar at all times. If the user clicked on them, a JS alert would show up telling the visitor to log in first.

That was the ONLY protection those pages had. No matter it was a WordPress-powered site, to begin. If you knew the URL or simply altered the code right there on the browser to remove the onclick-bound JS, you could get in.

And that was just the beginning of it. Eventually I convinced the boss to rebuild the site.

Comments
  • 23
    Funny thing is my boss back then couldn't stop rambling about how great this other dude was. XD
  • 4
    I still don't get it how some companies owner/boss don't know anything about programming . This is the case of my boss he cares only about what he sees . I mean anyone can fool them if they want .
  • 1
    All you had to do was add is_user_logged_in() to the private pages and set those special pages to that template. like...less than 1 hour fix. :)
  • 2
    @geilt the site had several issues. It was built like we were in early 2000's. Table layouts, lots of duplicity both in code and content, unused code, many bad practices.

    That was only the beginning, like I said in the OP. ;) But let's always find something to display your superiority.
Add Comment