[GiamPy.]

Quote:

Originally Posted by ****** Nope, not in any way. You don't check if any of the inputs are strings, or if they contain valid paths only you want. I also find it amusing that using your two factor authentication system is protected by only a password.

I can't think of another system, maybe an IP whitelist (?) - after all if you don't know the API key, which only the owner should possess, you won't be able to call any API.

Also, I was thinking if using POST to send the requests instead of GET, maybe it's more secure?

I am working on a way to sanitize the commands anyway.