years. Like hard-coded accounts, this is not necessarily found in five.
The direct requests and authentication bypass issues demonstrate a fundamental lack of
understanding of the stateless, client-controlled nature of web technology, and the ease
with which it can be subverted. These have been featured in the OWASP Top Ten and