Deleting Posts

[olls]

I just deleted Ben's post from my account using nothing but chrome developer tools :(

[geraintwhite]

Mind elaborating?

[olls]

The delete button is is a post form with a hidden field containing the pid to delete, change the pid to any post you want to delete, don't worry about the permissions...

[olls]

We don't have this problem with the edit post, it's the same thing, except it's a get form, and we actually check the user on the server.