Still sounds like a basic security issue to me.