I have plugged up the hole. You are now required to enter a password with each command that writes directly to a file.
It isn't a difficult bug to fix, and if you don't want to download a fresh copy, you can just disable do_writefile, and do_adhelp. I also suggest you disable edit_file, as well. It isn't hard to add a password requirement.
On the brighter side of things, this new version has TRUE/FALSE toggles on each ADD_COMMAND macro. This enables you to turn a command on or off at compile time. There is also a semi-functional do_oops command. This allows players to correct their typos.
I am currently working on a more memory-efficent database system. I'm going to try to move the more or less static fields of an object to the prototype, and have them accessed via macros. Don't worry, I'm going to make some nice macro/functions to allow you to change these "static" fields without changing every other object of the same vnum. :)