I've definitely written bad code, for sure. I don't mean to sound disrespectful, I chose my words pretty poorly there. I'm arguing that this isn't research. Th

I've definitely written bad code, for sure. I don't mean to sound disrespectful, I chose my words pretty poorly there. I'm arguing that this isn't research. There was no novel technique used or investigation into original paths of exploitation or increasing our understanding of previously unknown areas of anything. There's a material reason I said the above; calling the individual a researcher suggests that the exploitation of AFF was something quite complicated requiring a previously unknown attack, taking away from the fact that having an LFI in your app in 2016 is potentially bad luck but more likely just negligent; it should be highlighted as such.