top of page

Forum Posts

truongthanhdien.uit
Nov 24, 2017
In Coding with Velo
As having said, I could just only use wixData.query to query the collection on front-end, not on backend, when I use this query on backend, there is no result returned. This poses a critical vulnerability that when the query code appears on the client side on javascript file, an attacker could modify the code to query all the collections on the database, for example: wixData.query("myCollection") .find() .then( (results) => { let firstItem = results.items[0]; //see item below } ) .catch( (err) => { let errorMsg = err; } ); if this code appears on the javascript file on front end, a malicious user could change collection named "myCollection" to another collection, or he/she queries the data belonged to another user, etc. He/she forces the client side query the data that he/she wants. On our website project built on Wix, we avoid using query, insert, etc,... any database-related function on client side to mitigate the risk of being attack, but seems like the wixData.query is not applicable on the back end, so we stuck here. Please inform us that Wix Code Team understands the risk that I have pointed above and give solution to tackle problems. Thanks
0
1
433
truongthanhdien.uit
Nov 23, 2017
In Coding with Velo
yesterday until now, when we import the 'wix-users' module to the routers or the router-page as " import wixUsers from 'wix-users' ", we always suffer the wix error from console: Internal server error:Error: Cannot find module 'wix-users' at Function.Module._resolveFilename (module.js:469:15) at Function.resolveFilenameOptimized [as _resolveFilename] (node_modules/fast-boot/index.js:54:33) at Function.Module._load (module.js:417:25) at Module.require (module.js:497:17) at require (internal/module.js:20:19) <...> Beside that the when we use the wixLocation as " ", the error of " TypeError: n.trim is not a function " is appeared, I think there are some wix-code problems on these modules, please help us to tackle this problem as soon as possible so that we could build our website on time. Thank you.
0
9
2k

truongthanhdien.uit

More actions
bottom of page