Is this an example of code and penetration testing gone wrong.