Ticket IDOR: any buyer's name + phone by sequential ID

Anyone could page through sequential ticket IDs to read other buyers' names and phone numbers without logging in.

init.php:639 via /?view_ticket_svg=<id>