@schrottkatze have you tried changing any elements likely to go into the WHERE clause of the SQL?

Although, if that turns out to allow you to change other people's names, you get the ethical conundrum of disclosure possibly also fixing the other client side validation "feature".