Dear Mr Mulloo,
I am contacting you as you are the Manager of the Government Online Centre.
I visited
https://eprocstaging.publicprocurement.govmu.org and the same
is accessible to public. The SSL certificate used is that of the
production domain name, i.e eproc.publicprocurement.govmu.org. It is not
a good practice to leave a staging platform accessible to the world on
the internet. There could be exceptions under controlled access & logging.
Meanwhile the statistics page on eproc.publicprocurement.govmu.org show
DEMO1, DEMO2, DEMO3 and DEMO4. Are those dummy information on a
production site?
Regards,
--
Ish Sookun
- Geek by birth, Linux by choice.
- I blog at HACKLOG.mu.
https://twitter.com/IshSookun ^^ Do you tweet?
Received on Mon Jan 18 2016 - 08:44:24 PST