The Official Forum of The Grail Lords
Would you like to react to this message? Create an account in a few clicks or log in to continue.

[BUGS] Grail Crier

2 posters

Go down

[BUGS] Grail Crier Empty [BUGS] Grail Crier

Post by JuliusV Mon Oct 13, 2008 4:30 am

Hi there,

A security-bug in the Grail Crier page. It is possible to add html to the message you submit. People who want to (they suck) can abuse this by for example adding scripts into your page.

So, it is little work to fix this, but quite important to prevent others from doing harm to the game.

Cheers,

JuliusV
JuliusV
JuliusV
Seeker

Number of posts : 86
Registration date : 2008-09-19

Back to top Go down

[BUGS] Grail Crier Empty Thanks

Post by Lord Arogandor Mon Oct 13, 2008 5:45 pm

Thank you Julius,

I did know that 'they' could add code and that such text boxes are a way to kill a game. I didn't know that solving this problem was that easy Smile

I always used "nl2br" but now I can use both Smile

I guess I will also do this with all other text boxes and with the letters.
Lord Arogandor
Lord Arogandor
Game Master/Owner

Number of posts : 2991
Location : Somewhere around the Grail Monastery
Registration date : 2008-09-19

https://thegraillords.net

Back to top Go down

[BUGS] Grail Crier Empty Re: [BUGS] Grail Crier

Post by Lord Arogandor Wed Nov 05, 2008 5:14 pm

Fixed.
Lord Arogandor
Lord Arogandor
Game Master/Owner

Number of posts : 2991
Location : Somewhere around the Grail Monastery
Registration date : 2008-09-19

https://thegraillords.net

Back to top Go down

[BUGS] Grail Crier Empty Re: [BUGS] Grail Crier

Post by Sponsored content


Sponsored content


Back to top Go down

Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum