3 ms·
The url http://www.hadthatbeer.com/user/1 http://www.hadthatbeer.com/user/1 instantly worried me, so I tried http://www.hadthatbeer.com/user/2 http://www.hadtha
by MattBearman 15y ago
The url http://www.hadthatbeer.com/user/1 http://www.hadthatbeer.com/user/1 instantly worried me, so I tried http://www.hadthatbeer.com/user/2 http://www.hadthatbeer.com/user/2, http://www.hadthatbeer.com/user/3 http://www.hadthatbeer.com/user/3, etc and all were available.
Are user profiles meant to be public? If not that's a pretty serious security flaw.
Other than that, the site looks great.
- MPiccinato 15y agoThanks! The profiles are public by default and there is a setting to make it private, which would show only limited information to the public just so that someone can identify you when they are looking to friend you.