Hi. I need to fix this important security bug:
When I go to www.mysitename.com/virtual-gifts/view/6
I only need to change the final number (6...5...4..) to view all the sent/received virtual gifts.
I don't want my users may search privates virtual gift of others.
When I access to the private gift with this link, I see all the information (Message, Gift image and User profile photo - who send the gift).
This is a security bug because I can see all the privates and publics gifts and private information with only changing the last number of the link (www.mysitename.com/virtual-gifts/view/6 or 7,8,9....).
How may I fix that?
