Engineering journal
Real problems, and how they were solved.
No marketing content. Notes written afterwards about what broke, what was decided and why. No client is ever named.
- · 7 min
Assign a point to a zone by spatial query, not by typing
On a map administered by several people, asking a human which zone a point sits in guarantees that one day the map and the database will stop agreeing. The geometry already knows the answer.
- GIS
- Spatial SQL
- MySQL
- GeoJSON
- · 7 min
Multi-tenant IDOR: why the tests never catch it
One manager could read another venue's unpublished drafts by changing a digit in the URL. The flaw was not in the authorisation code: it was in its absence on a single route, and no test could have caught it.
- security
- access control
- multi-tenant
- IDOR