rawsh After looking at /api/users it looks like anybody can get the emails and name of every single user on the website! This is not very safe/whatever. At least include an option to disable the api.
jordanjay29 Are you logged in to an admin account? Then yes, you'll see emails via API access. Try as a guest.
AgentTwenty jordanjay29 Yes, I can see it as a guest. I can also see it as an unactivated user. Edit: Strange, now after a refresh, it's gone.
rawsh AgentTwenty jordanjay29 Same thing happens to me as agent twenty... Weird. I was as a guest, I could see it, refresh and its gone. Probably admin cookies.
