ReportDownloadUrl is publicly accessible

BingAds / BingAds-PHP-SDK

Other

56 stars 46 forks source link

ReportDownloadUrl is publicly accessible #123

Closed aknosis closed 4 years ago

aknosis commented 4 years ago

The report download url generated via report request is a publicly accessible url. This data should not be available to any machine other than that which has requested the report...

To reproduce, follow the code from the example here: https://github.com/BingAds/BingAds-PHP-SDK/blob/master/samples/V13/ReportRequests.php and take the ReportDownloadUrl and download the report from any machine in the world.

eric-urban commented 4 years ago

@aknosis since this is not specific to the PHP library, I suggest please submit a service feature request via Microsoft Advertising Feature Suggestions. Thanks!