steam.php doesn't do sanity checks
Closed this issue · 0 comments
foobarhl commented
The included steam.php doesn't do any sanity checking on the passed SteamID or ClientID, nor does it have access restrictions on what may query it.
Potential vector for misuse.