MMO security flaw