[tomcooks]

Bravo for pointing that out! Care to explain how you discovered this? Making such security mistakes is what my nightmares are made of

[aw3c2]

Probably tried to access http://sharesolo.com/.git/ for the repo and looked at the network traffic to see the get_notes.php.