This is hilarious -- I found this exact script and noted the exact same vulnerability last year. Good on you for posting about it.