hxxp://www.yoursite.com/pagename.php?serialnumber=-


LoL spot the flaw

It seems it would not be that hard to fool your server into thinking I was a legit user

just by changing some info in the link.

Pozzy!