Note: The parent comment accused me of giving clues to hack the application, but that part was later edited out, making my response a bit strange.

---

This is basically a free security audit, even though I only spent like five minutes. If your application can be "hacked" so easily, it's very irresponsible to say you're "verifying" the conjecture. Removing the comment doesn't make your application any more secure.

Btw, I even helpfully pointed to prior art which you can learn from. A butthurt response is pretty sad.