*groan*

Even worse, it's a coat related band...

Don't those idiots test their websites???

I bet the web developer wrote that site by throwing bananas at the keyboard.

I laughed out loud at that one, nice one John.

This has been bodged, not fixed. I just found the website via Google and the details of a guy called Nick in Derby were given to me, email address, postal address, phone number...

I notiiced a similar issue on the mailing list page of a well known UK sports team. If you go to edit your details, your member id is used as part of the url to your personal details page (www.team.com/edit?id=1234). Changing the id got you to another user's details.

I emailed them, they responded quickly, taking the page down short-term, and fixing it with a proper system within a few days.

You do have to wonder at the mentality of a "developer" who comes up with crap like that and implements it in a live site though. No doubt a simple download of demo code from an HTML For Dummies site, never intended as a secure solution, just a "how does a POST form work" example..

ok a bit of cock up but with the execption of the email address this is hardly sensitive information. name, address, telephone number and postcode? can you say "telephone directory"?