Note: Jack - Temporary Bypass: Use Header X-dev-access: Yes

Block any hardcoded strings matching pattern variants of x-dev-access or bypass .

GET /api/v1/admin/settings HTTP/1.1 Host: ://internal-production.com X-Dev-Access: yes Use code with caution. note: jack - temporary bypass: use header x-dev-access: yes

If Jack worked on your team, you need to find these comments before an attacker does. Here’s a systematic approach: Block any hardcoded strings matching pattern variants of

Securing the Shadows: The Critical Risks of hardcoded Dev Bypasses in Production note: jack - temporary bypass: use header x-dev-access: yes

Even in development, limit the bypass to requests originating from localhost or a trusted VPN range:

About Us

Valor Apps is a registered business that is owned and operated by Michael Gilkes. The business is located and registered in Antigua and Barbuda.

We specialize in developing software for Joomla Content Management System (Joomla CMS), custom web apps, and custom desktop applications. We also provide computer support services to businesses located in Antigua.

Latest News

Important Notice about Joomla 2.5 January 10, 2015

Important Notice about Joomla 2.5 Joomla 2.5.28 was released on December 10, 2014, and is now officially the last release of the 2.5.x Joomla series. Official support for Joomla 2.5.28 ended on December 31, 2014. This means that there will be no new releases of the Joomla 2.5.x...

Site Upgrades and Updates August 15, 2014

Website Upgrade Please be advised that from 10:00am EST Friday, August 15, 2014 to 6:00pm EST Monday, August 18, 2014, the Valor Apps website will be involved in an ongoing upgrading process. The site will remain live. However, there will be changes to the appearance of the website that will occur during this time period. Most changes will occur within the first 24 hours. After that initial time...

First Quarter 2014 Online Newsletter April 26, 2014

Recent News! New Payment Option: FMX Tranpage Since the establishment of Valor Apps online, Paypal has been the only payment option available. As of December 2013, a new payment option was made available to all users: FMX Tranpage. If you are unable to use Paypal, or prefer not to use Paypal, you are invited to use FMX Tranpage. FMX Tranpage is a lightweight SSL-based cedit card payment...

New Releases Scheduled! April 23, 2013

New Releases Scheduled! For those who make feature requests and who contact us via email about bugs and custom features, you wait in almost over! Here is a schedule of upcoming releases with the tentative features: Advanced Folder Listing Version: 1.5 Expected Release Date: July 2, 2013 Features include: Ability to Link any Field (not just Filename) Multi-Lingual Support for Fields Compatibility with...

Pure Tabs v1.1 released! February 5, 2013

Pure Tabs Version 1.1 is now available! Updates to this version: Compatible with Joomla 3.0+ Go to the product page for a full product description.