Very Important
 

very important bug stefan.

the html code in pm <graalmsg> and </graalmsg> when used together can show script variables not meant to be publicly seen. I believe this could lead to things getting hacked and such.

wft?

I think HTML in PM's should be disabled and repleaced with a system like we see on most forums where the tags are in "[]"'s instead of "<>"'s this would stop script kiddies from doing lame loops with java script that popup 1000000 windows and such.

to test it go make another account and login to two graal accounts on the same server and pm the other one <graalmsg>#a</graalmsg> it should give the other some information

I'm trying to, but...

15 ghost(s) before you

i did it and all i got was a messagesaying


yip thats right nothing
it wasnt p2p though
i only have one p2p account :(

Ono, it makes it so that you can see your own account name. What the hell are you talking about?:rolleyes:

some guy changed my name through that html stuff.

How? >:D

Graalmsg doesnt work for me,
I mean when it first came out it did,
but now it just doesnt...
and i have HTML enabled..
anyway #a just gives account name..
but you know come to think of it i bet you could script in graalmsg to get other info...
but i dont know scripting lol

its all greek to me