MTAS: Inadvertantly Hilarious
I once wrote a simple to-do list web application. It took me a few hours, and it was for my own amusement and understanding. No one but me ever used it or even knew it existed. It was online for all of a few days.
Yet still, that to-do list application was better secured than the MTAS system.
Tim Worstall has a good explanation of how security works in web applications. It might seem complicated to a lay person, but let me assure you that it is not. Tim is not joking when he says it is Day 2 of a script-kiddy cracker course. It is Day 1 of a web application design course.
Gross incompetence is putting it mildly.