08:13
2026-10-15
dev.to
ai-products
Somebody else's report is a 404, and the user id is in the where clause rather than in an if
A developer at CogniPrep detailed how the assessment platform's exercise report page at /dashboard/exercises/report/<attemptId> is secured by pushing the user id into the SQL where clause rather than …