people

This isn't a complete project - just a part of one, but I thought it worth sharing, both because it might inspire others and people might spot a security flaw I've missed. Background: the site I run is a social network, and we also have apps built in B4X, which talk to the system via an API...