@toddgrotenhuis @marmanold Its public API used no authentication. WAT.

When users deleted their posts, the site failed to remove the content and instead only added a delete flag to it. WAT.

I'm a fan of soft deletes in most cases but how difficult is it to add WHERE deleted_at IS NULL to your queries???