hello admins of this school.
three doors were wide open:
## public, password-less database backup in the web root ## database credentials sitting in a plaintext txt file ## a receipt uploader that accepts any file from anyone
exposing 6,883 accounts, 8,838 student records.
a school's first duty is to protect its students.
their information is their safety.
patch. rotate. audit.