@jacobsantos Unchecked $_POST, no user…

@jacobsantos Unchecked $_POST, no user permissions check. Haven't heard back from developer. It's not anything in the repo.