Blobs, BlobServers and URLs (and Santander)

[Mole]

I was just wondering who in Santander thought this would be a good idea:

http://www.santander.co.uk/csdlvlr/BlobServer?blobtable=MungoBlobs&blobkey=id&blobcol=urldata&blobheader=application%2Fpdf&blobheadervalue1=inline%3Bfilename%3DPDF-BANK0479.pdf&blobwhere=1314012714572&blobheadername1=Content-Disposition

Do they really have some many documents and methods of retrieving those documents that a simple id fetch wouldn't work?

[dkf]

Hmm, blobheadervalue1=inline%3Bfilename%3DPDF-BANK0479.pdf and blobheadername1=Content-Disposition would appear to be an interesting combination. What could possibly go wrong?

[Ben L.]

@dkf said:

Hmm, blobheadervalue1=inline%3Bfilename%3DPDF-BANK0479.pdf and blobheadername1=Content-Disposition would appear to be an interesting combination. What could possibly go wrong?

blobheadername1=Location&blobheadervalue1=http://what.thedailywtf.com/

[pjt33]

@dkf said:

Hmm, blobheadervalue1=inline%3Bfilename%3DPDF-BANK0479.pdf and blobheadername1=Content-Disposition would appear to be an interesting combination. What could possibly go wrong?

Forget that, what about blobkey=id&blobcol=urldata&blobwhere=1314012714572? Unless the BlobServer checks columns types, a bit of scanning could probably get a list of column names. The easy test would be blobcol=id.