Comment

Comment by hluska

This is not the first time that WP Fastest Cache has had a SQL injection vulnerability discovered.

Here’s a report on 0.8.4.8:

https://www.acunetix.com/vulnerabilities/web/wordpress-plugi...

Here’s a report on 0.8.7.4:

https://www.acunetix.com/vulnerabilities/web/wordpress-plugi...

I could go on (all night) but I trust you all get the point. I have two questions.

First, at what point can we say “Emre, you’re really bad at writing code. There are lots of other jobs. Find another.”

Second and more importantly for the future of the web, how can we as an industry protect innocent users from projects like this?? This monstrosity has over 1 million active installs and the chuckle head doesn’t have a fucking clue how to write SQL.

parent hluska 5 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton