> With only a couple of minutes experimentation I discovered that the app works by concatenating the username and password5 and using it in a URL of the form:

In 2026, these terrible practices still common. Meanwhile we are discussing the LLM generated code quality, the race to the bottom continues...