Why is the UI exposing Database concerns?

km991148 · 31-08-2021 1:15pm #1

Tried to thank a post there and the system exposed an alert showing the database structure.

This is more than a little concerning...

[Screenshot removed but I have a saved copy for reference ~Niamh]

Boards.ie: Niamh · 31-08-2021 3:36pm

I'll make the team aware of this, thanks, Possibly a momentary issue while someone was working on something.

km991148 · 31-08-2021 4:00pm

https://www.boards.ie/discussion/comment/117828561#Comment_117828561

Momentary or not, none of that stuff should make it to a user. Ever. As a user it makes me question the security of my data. As a customer (i.e. boards.ie) I would be quite concerned tbh.

nullObjects · 01-09-2021 8:48am

It's 100% definitely a good thing you've reported this but maybe an admin could forward the screenshot to the dev team and remove it?

(It exposes the table names and query structure)

Stack traces or other system messages should never find their way back to the end user

Boards.ie: Niamh · 01-09-2021 10:56am

Good advice, thank you.

New Home · 01-09-2021 1:32pm

@Boards.ie: Niamh

Hi Niamh, that image is still visible in the quoted post.

Boards.ie: Niamh · 01-09-2021 2:15pm

Gone now, thanks.

ohnonotgmail · 07-09-2021 10:37am

Just to note that as boards.ie now runs using Vanilla forum software the entire database structure is public knowledge. The message should not have mentioned the database structure but that is only because it is not useful information to users not because it is a security concern.

Why is the UI exposing Database concerns?

Comments