BugBountyHunter

Summary:

In v1 of firstblood we were able to register as doctors by using a leaked invite code, but this has been fixed and the leaked code is no longer valid.

so in order for attacker to register and gain access to the drpanel, he/she needs to obtain a valid invite code.

the scope of firstblood v2 had something out of place, the word testing, so i tried to use test as invite code, and it worked!

Steps to reproduce:

1. Go to /register.php page.
2. Enter your desired username.
3. In invite code field enter test and submit the request.

4. Observe that the registration is successful and the account is created.