draft1846 leaks email addresses and companies other users have selected

[jenf]

getDraft.php returns the current status of the draft and also peoples email addresses and url key which allows them to be used to act as other players.

{ "cpd" : 0, "curPlayer" : 1, "deck" : [ "Chicago and W. Indiana", "Tunnel Blasting Co." ], "hand" : [ "Mail Contract", "Blank Card", "Big 4", "Blank Card" ], "numbPlayers" : 3, "players" : [ { "cash" : 400, "confirmed" : "Yes", "email" : "storm", "name" : "Scott E", "privates" : [ "Blank Card" ], "urlKey" : "00461EXGHR2P" }, { "cash" : 260, "confirmed" : "Yes", "email" : "jen", "name" : "Jen F", "privates" : [ "Michigan Southern" ], "urlKey" : "00462RWNPXYA" }, { "cash" : 360, "confirmed" : "Yes", "email" : "scott", "name" : "Scott P", "privates" : [ "Ohio and Indiana" ], "urlKey" : "00463M3NM3PJ" } ], "return" : "success", "status" : "Active", "updtCount" : 4 }