Server does not authenticate clients

[ProfFan]

Please add an API key for the client in a each-client basis.

[tengattack]

the record id and domain id can be treated as key.
But you are right, could you modify it?