Lab - User ID controlled by request parameter, with unpredictable user IDs

We went to a blog post by the user carlos :

After Clicking his username, we could see his userid :

We pasted in the /my-account directories id parameter and was able to get the API key of carlos and submit it and solve the lab :

---