Xano Automatic CRUD - Beware
Hey all! Sharing a practice I recommend when building with Xano. When you create a new database table, Xano by default checks the option to automatically create CRUD endpoints. Be careful with this. Our agency recently took over a WWX project and found that the previous developers had been leaving this checked, creating their own endpoints for the tables, and leaving these CRUD endpoints there. This resulted in a major security issue - there were unauthenticated endpoints open for deleting, adding, and editing records that absolutely should not have been there. Thankfully we spotted this and fixed it before anyone abused it. Only leave this checked if you think you will need it, and be sure to delete unused endpoints, and secure any you plan on using!