Our setup program is ancient, and is really showing its age.

• Its internal architecture is terrible, making it a pain to maintain
• It suffers from many security issues, many of which are not easily fixable - if at all
• It does not require user authentication

The only solution we can offer at the moment is a recommendation to delete the admin/ directory - but as a quick Google search shows, there are many public instances out there that do not do it,

It would be no small undertaking, but I believe that a complete rewrite is necessary.