I'm working on hiring some more senior level engineers, and a recruiter just sent me over a resume for the person. In there is the url of a website they built for reference. Naturally, I went straight there, poked around, and then did my best to try to break it.
It didn't take very long. Not only was I able to trigger some fatal errors, but I know they were fatal errors because PHP on his server is apparently configured to have display_errors On (a big no-no for security reasons in any production environment).
I haven't even talked to the guy yet, and I already find myself dubious. I consider attention to detail and awareness of security issues to be paramount (especially in senior level engineers), and these issues seem like big red flags for both of those. Am I over-reacting? Is it worth the time to interview him anyway? Everyone makes mistakes after all. I just know that if it was me, I would check any example code I provide with a fine-tooth comb before putting a reference to it on my resume. Thoughts?
Edit it to clarify: the job is specifically a software engineer/web developer. If given the job, the candidate will be building websites for us. I would be hiring him to specifically handle the kinds of responsibilities that he messed up in his demo.