26horses Forum
> >

Misc: Signature field can be abused.

0 Members and 1 Guests are viewing this board.
  • Roboben1
  • Irregular
  • 28 posts
  • Reputation 8
  • Honourable
    Dishonourable
  • I love 26horses Productions
Oct 24 2014 10:10 pm

When changing the signature the users will notice they can enter HTML or other related code. Which COULD have an effect on the back-end. The user can also abuse this to display images or other content in their posts.

See the image (signature) above my banner image.

Example signature:
"<img src="http://upload.wikimedia.org/wikipedia/en/d/d2/StargateIrisAnimation.gif">"

Regards,
Ben

  • Demogorgon
  • Enthusiast
  • 224 posts
  • Reputation 109
  • Honourable
    Dishonourable
  • I love 26horses Productions
Oct 24 2014 10:11 pm

Please read my post about how to link a URL.

  • Roboben1
  • Irregular
  • 28 posts
  • Reputation 8
  • Honourable
    Dishonourable
  • I love 26horses Productions
Oct 24 2014 10:13 pm

Automatic reply? - this is not a link.

  • Demogorgon
  • Enthusiast
  • 224 posts
  • Reputation 109
  • Honourable
    Dishonourable
  • I love 26horses Productions
Oct 24 2014 10:25 pm

What?

  • Shadowing
  • Devoted
  • 1440 posts
  • Reputation 240
  • Honourable
    Dishonourable
  • Captain of the boat or captain of the Sea?
Oct 24 2014 10:28 pm

yah there is a few spots I've misses that allows html inserts.

What ever you can do or dream you can always begin it because boldness has genius, power and magic in it
  • Demogorgon
  • Enthusiast
  • 224 posts
  • Reputation 109
  • Honourable
    Dishonourable
  • I love 26horses Productions
Oct 24 2014 10:28 pm

your link

  • Roboben1
  • Irregular
  • 28 posts
  • Reputation 8
  • Honourable
    Dishonourable
  • I love 26horses Productions
Oct 24 2014 10:33 pm

@Demogorgon

The link in the post is not a link to be clicked or viewed - it is an example in the code used. Hence why it isn't linked.

I believe shadowing has got the jest of the ticket. If something is unclear, please explain.

Thanks,
Ben

  • Shadowing
  • Devoted
  • 1440 posts
  • Reputation 240
  • Honourable
    Dishonourable
  • Captain of the boat or captain of the Sea?
Nov 10 2014 6:10 pm

This exploit is fixed now

What ever you can do or dream you can always begin it because boldness has genius, power and magic in it