Now includes an over 300 line long switch statement!

This company I’m interning at. This one lady asked me to do a review of a website they outsourced. Entire source code sits on the browser. Entire vibe coded by amateurs.
Worse than a honeypot so much an attacker would get diabetes.

No security feature at all. I was able to do privileges escalation.

From ProgrammerNullposting in facebook

randomize
if (cone1x >= carx - 16) and (cone1x <= carx + 16) and (cone1y > 416) and (cone1y < 480) then goto gameover
cone1y = cone1y + speed
if cone1y > 512 then  cone1y = 0 : cone1x = cubyte(rnd*256)

if (cone2x >= carx - 16) and (cone2x <= carx + 16) and (cone2y > 416) and (cone2y < 480) then goto gameover
cone2y = cone2y + speed
if cone2y > 512 then  cone2y = 0 : cone2x = cubyte(rnd*256)

if (cone3x >= carx -16) and (cone3x <= carx + 16) and (cone3y > 416) and (cone3y < 480) then goto gameover
cone3y = cone3y + speed
if cone3y > 512 then  cone3y = 0 : cone3x = cubyte(rnd*256)

if (cone4x >= carx - 16) and (cone4x <= carx + 16) and (cone4y > 416) and (cone4y < 480) then goto gameover
cone4y = cone4y + speed
if cone4y > 512 then  cone4y = 0 : cone4x = cubyte(rnd*256)


if (cone5x >= carx - 16) and (cone5x <= carx + 16) and (cone5y > 416) and (cone5y < 480) then goto gameover
cone5y = cone5y + speed
if cone5y > 512 then  cone5y = 0 : cone5x = cubyte(rnd*256)

if (cone6x >= carx - 16) and (cone6x <= carx + 16) and (cone6y > 416) and (cone6y < 480) then goto gameover
cone6y = cone6y + speed
if cone6y > 512 then  cone6y = 0 : cone6x = cubyte(rnd*256)

if (cone7x >= carx -16) and (cone7x <= carx + 16) and (cone7y > 416) and (cone7y < 480) then goto gameover
cone7y = cone7y + speed
if cone7y > 512 then  cone7y = 0 : cone7x = cubyte(rnd*256)

if (cone8x >= carx - 16) and (cone8x <= carx + 16) and (cone8y > 416) and (cone8y < 480) then goto gameover
cone8y = cone8y + speed
if cone8y > 512 then  cone8y = 0 : cone8x = cubyte(rnd*256)randomize
if (cone1x >= carx - 16) and (cone1x <= carx + 16) and (cone1y > 416) and (cone1y < 480) then goto gameover
cone1y = cone1y + speed
if cone1y > 512 then  cone1y = 0 : cone1x = cubyte(rnd*256)

if (cone2x >= carx - 16) and (cone2x <= carx + 16) and (cone2y > 416) and (cone2y < 480) then goto gameover
cone2y = cone2y + speed
if cone2y > 512 then  cone2y = 0 : cone2x = cubyte(rnd*256)

if (cone3x >= carx -16) and (cone3x <= carx + 16) and (cone3y > 416) and (cone3y < 480) then goto gameover
cone3y = cone3y + speed
if cone3y > 512 then  cone3y = 0 : cone3x = cubyte(rnd*256)

if (cone4x >= carx - 16) and (cone4x <= carx + 16) and (cone4y > 416) and (cone4y < 480) then goto gameover
cone4y = cone4y + speed
if cone4y > 512 then  cone4y = 0 : cone4x = cubyte(rnd*256)


if (cone5x >= carx - 16) and (cone5x <= carx + 16) and (cone5y > 416) and (cone5y < 480) then goto gameover
cone5y = cone5y + speed
if cone5y > 512 then  cone5y = 0 : cone5x = cubyte(rnd*256)

if (cone6x >= carx - 16) and (cone6x <= carx + 16) and (cone6y > 416) and (cone6y < 480) then goto gameover
cone6y = cone6y + speed
if cone6y > 512 then  cone6y = 0 : cone6x = cubyte(rnd*256)

if (cone7x >= carx -16) and (cone7x <= carx + 16) and (cone7y > 416) and (cone7y < 480) then goto gameover
cone7y = cone7y + speed
if cone7y > 512 then  cone7y = 0 : cone7x = cubyte(rnd*256)

if (cone8x >= carx - 16) and (cone8x <= carx + 16) and (cone8y > 416) and (cone8y < 480) then goto gameover
cone8y = cone8y + speed
if cone8y > 512 then  cone8y = 0 : cone8x = cubyte(rnd*256)

Because using the hallucination machine as a package manager could never go wrong, ever!

this was right before the exam btw, this wasn't him teaching us the basics

```

if (x ==1) {

return true;

} else if (x != 1) {

return false;

}
```

```

public class Bank() {

private int money;

public void setAmount(int money) {

    this.money = money;

}

private int getMoney() {

    return money;

}

}

```

(he then never used getMoney())

some other amazing conventions he taught us was to always comment every single line of code, to an obnoxious point. he told us to use getter and setters everywhere, even when constructors are all thats necessary and half the time the getters were private and just returned the value directly. He just gave up on teaching us recursion because he didnt understand it and "it would never actually show up on the ap exam".

if I hadnt already known a lot of java and been willing to teach it to my classmates when they asked, we would never have gotten past the exam. (newsflash, there were recursion questions on the exam)

boolean isAllowed = "true".equals(getAttribute(item, "isAllowed"))

the fields of "item" get populated through an xml file and parser. what could possibly go wrong here? hint: he wrote "isAlowed" and commited it like that.

Our former IT director (35+ years of experience) wrote this and didn't see what was wrong here.

I just wanted a loop man...

Second image is my attempt at explaining things.

No, the chair is not OK.

This is in the Discrete event simulation software JaamSim.

Edit: the software does not have any implementation of for/while loops otherwise that would have been the first thing I tried

Took me quite a while to debug this, considering I expected uint32 to be a... uint32?

ErrorMessage successMessage = new ErrorMessage(ErrorType.ActivityCreateSuccess);

(From an approved PR with 2 reviewers - how do some people sleep at night??)

(HP can't be changed while this code is running and even if it could then this approach would cause more problems than having it all in one if statement because then the boss would only be half-defeated and everything would go wrong)