Well what I want to know where this code was found. Was it possibility in the app, xml or php, maybe are they letting others listening to conversations, basically playing Man in the Middle, listening/ connecting to the ports on the site or his ports?