3 ms·
That's worse than SQL injection. Didn't they build ACL?
by narad 15y ago
That's worse than SQL injection. Didn't they build ACL?
- romaniv 15y agoACL is probably part of the problem here. Most ACLs are very inflexible and are "opt in". They probably had ACL to block unregistered user from visiting the page, but it didn't deal with individual accounts.