How i earned easy$$$ by deleting user comments on any post

Hello everyone , i wanted to share with you one of my easiest findings that can make you $$ easily . So lets talk briefly about the program that i was hunting on to give you the big picture . Its like a shopping program and you can share these items with other users or friends by a link so when you share it between your group you create a post on this item something like this in following picture .

At the begging i tried accessing the post without have a link or permission by simply creating a post from the “Attackers” account and change the method endpoint to GET and remove the parameter from the request and try to access the post details without any link or invitation to the post

Then after changing the “POST” to “GET” and remove the parameters in the body and swap the post ID in url :its the number after the V1 by the victims post ID i accessed the post details and it worked fine a simple IDOR but then i tried to delete the users comments and likes from the post and the only one who…