Better secure my website

Anvil Q&A
1

I saw these logs. Someone from the USA was able to hack my module?

ExternalError: Error: Forbidden
at anvil-services/anvil/users/__init__.py, line 83
called from anvil-services/anvil/users/__init__.py, line 83
called from Routing, line 21
called from Routing, line 36
Starting server runtime... 
ExternalError: Error: Not Found
at anvil-services/anvil/users/__init__.py, line 83
called from anvil-services/anvil/users/__init__.py, line 83
called from Routing, line 21
called from Routing, line 36
Server runtime connected.

Or he/she did not succeed?
Can you give me some insights ? From what I see here?
Eran

2

ExternalError typically means an error passed from Javascript code.

What are you seeing that makes you think “hack”? I’m not sure there’s much anyone can tell you from this log excerpt alone.

One more thing: I guess the line referred to in the traceback can be seen here: https://github.com/anvil-works/anvil-runtime/blob/master/services/anvil/users/__init__.py

3

The Routing is my routing model.
Line 36 and line 21 are inside my python client routing model, that represents my Main function, and the logs were captured are from the USA, I live in Israel.
I am still building my web app so nothing to steal, but this hacker tried to execute that module python script and failed.

How he/she managed to execute module on the client ? No idea. I just want the system to be totally secured, I am building healthcare SAS platform, I have regulation when it comes to patients medical records, I love Anvil.works very much, an amazing platform.
Just take care of the cyber part.

Thanks
Eran

4

Here’s a place to start:

Building Secure Apps

2 Likes
5

The most common way would be that someone/something (likely a bot crawling for a search engine or possibly a more nefarious purpose) navigated to the url for your app, which then runs your startup module.

6

Thanks for sharing.

Eran

7

Thanks hugetim,

Eran

1 Like