Quote from: mrvision on April 12, 2013, 09:57:16 PM

I think we could help Simon if we tell him

Our username
The balance we remember.
The active orders we had
And if required, our password so he can log in as the user and check our account.

There are two obvious issues with this:

1. Users can report higher balances than they actually have.
2. Passwords should not be needed; he already has access to the database, and if he really needed to be able to log in as the user, he could just temporarily change the password hash stored for the user.

Zr40

Posts

Merits