Brokaw

a third party grants, to any of the web requests to /api.php - HIGHLY recommended to keep this at false,