tfw you have matured enough as a developer to look at old legacy code (some of which you contributed to) from a hacked together UI Frankenstein kludge and immediately you notice all the security flaws.

How fortunate there is strong query param validation going on...otherwise this would be a veritable shit storm.