save_data() trusted the action and id in the POST data. A visitor can now only add a new story to the queue, and cannot delete.
save_data() trusted the action and id in the POST data. A visitor can now only add a new story to the queue, and cannot delete.