E-Procurement Staging accessible to public?

From: Ish Sookun <ish_at_hacklog.mu>
Date: Mon, 18 Jan 2016 12:39:50 +0400

Dear Mr Bhoyroo,

I visited https://eprocstaging.publicprocurement.govmu.org and the same
is accessible to public. The SSL certificate used is that of the
production domain name, i.e eproc.publicprocurement.govmu.org. It is not
a good practice to leave a staging platform accessible to the world on
the internet. There could be exceptions under controlled access & logging.

Meanwhile the statistics page on eproc.publicprocurement.govmu.org show
DEMO1, DEMO2, DEMO3 and DEMO4. Are those dummy information on a
production site?

Regards,

-- 
Ish Sookun
- Geek by birth, Linux by choice.
- I blog at HACKLOG.mu.
https://twitter.com/IshSookun ^^ Do you tweet?
Received on Mon Jan 18 2016 - 08:40:15 PST

This archive was generated by hypermail 2.3.0 : Mon Jan 18 2016 - 08:54:02 PST