News for hackers. Stuff that matters.

A comment on Ask HN: My web app was hacked today – Bad experiences and how to prevent them?. Parent comment

Re:Ask HN: My web app was hacked today – Bad experiences and... by jlis on Thursday February 27, 2020 @04:40AM (#22431941)
What I don't get is how the .env file was even served when Laravel uses the public/index.php as starting point, so your root Folder should have been the public/ folder, not the application folder.

Mistakes like this happen, but it takes courage to post about it. Thanks for sharing it.

[ Parent | on HN ]
Re:Ask HN: My web app was hacked today – Bad experiences and... by ngranja19 on Thursday February 27, 2020 @07:06AM (#22432543)
I'm not totally sure I'm not a Laravel expert I just use it as a backend api so I believe I exposing the entire Laravel folder instead just the public. And yes is embarrassing haha.
[ Parent | on HN ]
Re:Ask HN: My web app was hacked today – Bad experiences and... by saluki on Thursday February 27, 2020 @12:13PM (#22435259)
I was curious too how this could happen, since the .env wouldn't normally be in the public folder.

Laravel is a great framework, check out Laracasts.com and forge.laravel.com, it's a deployment tool that will spin up a VPS on AWS, Digital Ocean, etc. with the proper configuration.

[ Parent | on HN ]