// recovered Northvale development fragment // owner: lclay const ADMIN_USER = "admin"; const ADMIN_PASS = "Northvale1987!"; // simulated training credential function authorize(user, pass) { if (/('\\s*or\\s*1=1)/i.test(user + pass)) return "admin"; return user === ADMIN_USER && pass === ADMIN_PASS ? "admin" : null; } // this was supposed to teach people to look. // apparently it did. ref=MF-DF7577E9-8FB7