in Georgia, we have this one agency that has lots of other companies and startups connected. so they have .ge domains registrar but they also make templates and sell them for 100/month laris. you can preview these templates on one domain they bought specially for that (why do that when you have your own servers and no limit on hosting and can make lots of subdomains but okay that's another issue) and when you edited the path of the preview link and just went to the domain.ge path without any slashes you could access the server's file information and basically anything that was on the server. that is a Huge security issue but to make it even worse they had .zip files of the templates openly hosted on the open server. when I realized they made a very beginner mistake I was just laughing so hard. I didn't download even a single .zip file from the server because their templates are shit. and reported the bug to their support and they fixed it in like 4 mins, I went to the toilet and it was fixed. but the funny part is they make Lots of money from that service and they fucked up the only thing they could have fucked up. Pathetic.
Dustin.
