Hello,
my patience has run out. I've been trying to get in contact with the developer for over a week now. In spite of the view on the privacy I let myself down to announce myself as a guest in the Discord server. In vain. Obviously, the colleague is also only sporadically available. After another visit via PN to find an appointment to chat, I get a friendly answer.
If that's my thanks for my efforts, I'd be happy to do so in public. Even if I would support the project itself, that is simply sloppy work. All containers are editable for all registered users. Just run through the IDs (/folder/manager/edit/6666). Basic SQL-injections also went through, but I didn't pursue that further. So I cannot confirm whether there is a gap here. The API was also not checked.Du hast mich jetzt über 4 verschiedenen Discord Profile angeschrieben... ich habe dir auf den ersten zwei geantwortet.
Dann schreib es hier wenn du nicht in der Lage bist Discord zu benutzen. Danke
I recommend to remove everyone until further notice sensitive data like your coinhive keys, etc., until the developer has thought about rudimentary security concepts.
Jon
