Yes, this is beyond incompetent. Even someone without any programming knowledge would probably know that you can't have an API for checking the username and pas

Yes, this is beyond incompetent. Even someone without any programming knowledge would probably know that you can't have an API for checking the username and password combinations of all users.