@@DevDungeon Nice , may I know if this issue or exploit will still occur if your website does have an customized url page instead I mean this ( site.com/this-is-the-new-page ) instead if site.com/node/101
@@DevDungeon what a great way to learn. just one question, if the drupal 8.6 didnt have any "node" then those exploit will never work. is that correct?