Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🐞 [BUG] - The DB is exposed. #632

Open
1 task done
harsh-haria opened this issue May 14, 2024 · 2 comments
Open
1 task done

🐞 [BUG] - The DB is exposed. #632

harsh-haria opened this issue May 14, 2024 · 2 comments
Labels
bug Something isn't working

Comments

@harsh-haria
Copy link

harsh-haria commented May 14, 2024

Description

The connection URL of MongoDB server is exposed in the code. I can fix this. Can you assign this issue to me?
working on this under GSSOC 2024.

Current behaviour

MongoDB URL is directly in the code itself. Anyone with the link can use it to access the db and make changes to the database,

Expected behaviour

The URL should have been in an environment file which is not tracked on Github and is on the hosting server only.
The link should be then passed in the code by the process.
This makes sure that no one apart from the creators get access to the live database.
And for the contributors, we can add the steps in the readme file so they can create their own local version of the database and work on it rather than working on the live database itself.

Reproduction steps

1. Go to 'db/db.js'
2. Scroll down to 'Line 18'
4. See the exposed link.

Screenshots

masked the link for ensuring safety

masked the link for ensuring safety

Logs

No response

Browsers

Microsoft Edge

OS

Windows

Are you contributing for a program ?

GSSoC2023

Code of Conduct

  • I have read and agree to the Contributing Guidelines of this project.
@harsh-haria harsh-haria added the bug Something isn't working label May 14, 2024
Copy link

Hello @harsh-haria!
Thank you for raising this issue.

Please make sure to follow our Contributing Guidelines. 💪🏻
Don't forget to ⭐ our Project-Amupedia. 📔

Our review team will carefully assess the issue and reach out to you soon! 😇
We appreciate your patience! 😀

@amanjaiswal7236
Copy link

I like to work on this issue under GSSOC'24
I can resole this issue by adding MONGODB_URL in the .env file as standards.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants