Unauthenticated full attendee-PII dump via `?luc1_override`

An unauthenticated visitor can trigger a hidden parameter that dumps every attendee's name and phone number at once.

override.php:170 via <app/product page>/?luc1_override