Exactly, this is bad security plain and simple