All ideasMore in Work
Work

The AI built a sign-up system where anyone could log in as anyone

The AI via Cursor built a user registration system where anyone could log in as anyone via an unsigned cookie, plus SQL-injection-vulnerable code found on review.

This one went wrong. Read what happened so you don’t hit the same problem.

How it works

  1. The AI via Cursor builds the registration system
  2. Review finds an unsigned cookie that lets anyone log in as anyone
  3. SQL injection holes are found too

Why it’s worth knowing

The login worked perfectly, it just never checked who was logging in.

Where it’s from

Summarized from a public post on news.ycombinator.com. See the original ↗

Upgraded prompt

A ready-to-use prompt for this idea, built from research on what makes AI agents do the job right: who the AI should be, the exact steps, and a check to make sure it was done the way you wanted.

1Who the AI should be
2The prompt, with the steps
3The check when it’s done
Upgraded prompts are coming soon.

Try next

WorkA contractor talks measurements into his phone and QuickBooks sends the estimate in 45 secondsWorkThe AI audited my eBay store, found 28 listings going nowhere, and sold a bundle for meWorkOne man released a whole movie with about 40 tools he built with AIWorkA text and voice agent worked a realtor's 60,000 old leads and turned up 34 closed deals

Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.