[bot41]

The worst tech team you've ever seen and yet they are generating 20 million a year? I think you should give them the respect they deserve and understand the limitations they have been under.

My thoughts:

* Get the code in source control straight away

* Get the infrastructure stable and up to date if it's not

* Get CI pipelines set up. As part of this, make sure the code is running through a static analyser. This will give you a backlog of things to work on.

* Organize an external penetration test to be carried out

* Investigate updating and/or consolidating the software libraries used (Jquery etc)

* Choose a page/feature to update on its own. Bring it up to date.

At this point, you should be in a much better state and you will have learned a lot.

[Cederfjard]

> The worst tech team you've ever seen and yet they are generating 20 million a year? I think you should give them the respect they deserve and understand the limitations they have been under.

If the right opportunity is there, you can make a lot of money on an awfully built product that barely keeps it together. That doesn’t mean that there aren’t a lot of risks involved with that and that things can’t go south in a hurry.

I’m obviously not familiar with this project, but it sounds like a lot of things many’d consider table stakes are missing, especially for such a large source of revenue. Perhaps I’m not imaginitive enough, but I can’t come up with any limitations they might’ve been under that would justify that. I think it’s fair to call that out, even if they happen to make money despite this.

[bot41]

There is definitely loads to fix and it does sound like the team was inexperienced but they were successful it seems.