Blog post id enumeration can lead to unwanted information disclosure