re: #10 thedopefishlives
The first rule of designing a public interface to an application is to assume the worst about any user data. Failure to do so leads to stuff like this.
Like I was saying in another thread, any system you design will be inspected for ways to game it, and if there are any, they’ll be exploited. It’s stupid to expect any different.