Very Important

Solareon · #1 01-21-2002, 05:44 AM

very important bug stefan.

the html code in pm <graalmsg> and </graalmsg> when used together can show script variables not meant to be publicly seen. I believe this could lead to things getting hacked and such.

Slaktmaster · #2 01-21-2002, 05:47 AM

iniquitus · #3 01-21-2002, 05:48 AM

I think HTML in PM's should be disabled and repleaced with a system like we see on most forums where the tags are in "[]"'s instead of "<>"'s this would stop script kiddies from doing lame loops with java script that popup 1000000 windows and such.

Solareon · #4 01-21-2002, 05:50 AM

to test it go make another account and login to two graal accounts on the same server and pm the other one <graalmsg>#a</graalmsg> it should give the other some information

Xythar · #5 01-21-2002, 06:01 AM

I'm trying to, but...

15 ghost(s) before you

AlexH · #6 01-21-2002, 06:05 AM

i did it and all i got was a messagesaying

yip thats right nothing
it wasnt p2p though
i only have one p2p account

Xythar · #7 01-21-2002, 06:06 AM

Ono, it makes it so that you can see your own account name. What the hell are you talking about?

Chrismas · #8 01-21-2002, 06:07 AM

some guy changed my name through that html stuff.

Xythar · #9 01-21-2002, 06:08 AM

Quote:

Originally posted by Chrismas
some guy changed my name through that html stuff.

How? >:D

feivel · #10 01-21-2002, 06:57 AM

Graalmsg doesnt work for me,
I mean when it first came out it did,
but now it just doesnt...
and i have HTML enabled..
anyway #a just gives account name..
but you know come to think of it i bet you could script in graalmsg to get other info...
but i dont know scripting lol

Griffyn · #11 01-21-2002, 07:16 AM

its all greek to me