Jarrett describes the steps to reproduce a security hole in BlogEngine.NET for deleting and approving comments. He also provides the source code for a quick fix. ...