module

Well, it's been an incredibly long time since I've written anything, so here's a little something to get started again.

I wrote a in-house Drupal module for one-use ticket file streaming. Basically, a unique identifier is used to stream the file, then is discarded, making the url invalid after one use. Everything worked fine for logged-in users, but just today I noticed a giant hole: users who are not logged in can access the file as much as they want, thanks to Drupal's caching system.