[BUGS] Grail Crier

View previous topic View next topic Go down

[BUGS] Grail Crier

Post by JuliusV on Mon Oct 13, 2008 4:30 am

Hi there,

A security-bug in the Grail Crier page. It is possible to add html to the message you submit. People who want to (they suck) can abuse this by for example adding scripts into your page.

So, it is little work to fix this, but quite important to prevent others from doing harm to the game.

Cheers,

JuliusV
avatar
JuliusV
Seeker

Number of posts : 86
Registration date : 2008-09-19

Back to top Go down

Thanks

Post by Lord Arogandor on Mon Oct 13, 2008 5:45 pm

Thank you Julius,

I did know that 'they' could add code and that such text boxes are a way to kill a game. I didn't know that solving this problem was that easy Smile

I always used "nl2br" but now I can use both Smile

I guess I will also do this with all other text boxes and with the letters.
avatar
Lord Arogandor
Game Master/Owner

Number of posts : 2503
Location : Somewhere around the Grail Monastery
Registration date : 2008-09-19

http://www.thegraillords.net

Back to top Go down

Re: [BUGS] Grail Crier

Post by Lord Arogandor on Wed Nov 05, 2008 5:14 pm

Fixed.
avatar
Lord Arogandor
Game Master/Owner

Number of posts : 2503
Location : Somewhere around the Grail Monastery
Registration date : 2008-09-19

http://www.thegraillords.net

Back to top Go down

Re: [BUGS] Grail Crier

Post by Sponsored content


Sponsored content


Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum