A hole in the registration confirmation system
 

your website/ok.php?type=signup&email=suslik@gmail.com

your website/confirm.php?id=1&secret=ghjfykjymkuhkuky79mi9ym968mfm

your website/recover.php?id=1&secret=fghfth67n686u6nu

or a live example:

https://bluebird-hd.org/ok.php?type=...slik@gmail.com

https://bluebird-hd.org/confirm.php?...y79mi9ym968mfm

https://bluebird-hd.org/recover.php?...hfth67n686u6nu

:relax:

Want to remove the hole? Read here: https://tbdev-forum.top/viewtopic.php?f=53&t=358