Don't have Telegram yet? Try it now!
https://gbhackers.com/a4-insecure-direct-object-references/
A4-Insecure Direct Object References