interesting...

[dougo]

this is very interesting.

Comments

[dougo.livejournal.com]

Yeah, it's basically taking advantage of the convenience of having an "I'm logged in" cookie. Pretty much the same thing as setuid-bit hacking, I think. I'm pretty sure there's a standard way to fix it, but I don't remember the details...