3

Auto Login feature enables itself when a certain config flag is present - the app will login as an admin without requiring username or password.

I pray to the Continuous Deployment monsters that the config setting never gets copied to production by mistake.

Comments
  • 0
    I tried to remove the code once and it came back this week.
  • 0
    @juneeighteen I removed the remember me feature from the company application so everybody hates me, but nobody is reverting it since we needed to conform to some security standards and that implementation was just laughably insecure :)
Add Comment