Its value noting that if the fresh new attacker got an inappropriate product ID in the first place, the whole story are hogwash