Adnan Khan

Mobi King

Found a live vulnerability on their production site, fixed it, and moved them somewhere it would not happen again.

Role
Security fix, then hosting migration
Client
Mobi King, iPhone wholesale, UAE
Stack
WordPress · security · hosting migration

The situation

Mobi King is an international iPhone wholesaler based in the UAE, selling graded handsets to business buyers rather than to consumers. Their catalogue and their trade pricing both live on a WordPress site.

A wholesale buyer placing a bulk order is making a judgement about whether this supplier is safe to send money to. A site with a known hole in it is not a detail on that kind of purchase.

The Mobi King Phones homepage, headlined Graded For Perfection, Priced For Business, above a wholesale iPhone listing.
The Mobi King homepage and wholesale listing.

The work

I found a live security vulnerability on the production site and fixed it.

Fixing it closed the immediate hole. I then migrated them onto hardened hosting, so the baseline they run on is stricter than the one the problem appeared on.

More work