Insecure Direct Object Reference and How to Protect Against It | Hacker News Reader