Web Application Security Failure Example from a Recruiter's Web Site

Hello all,

I develop web applications for a living, and frequently get into discussions about session management, query strings, security, etc etc. You know the drill.

Anyway, today i found an interesting security problem from a random person visiting my site that illustrates the importance of proper Authentication and Authorization techniques.

I did a quick blog with screenshots. Check out:

http://www.fstxblog.com/completely-...n-security.html

How do other developers address these types of issues?

Cheers,

Reid

PS If this is the wrong area, please let me know or feel free to move the post.