[BUGS] Grail Crier
2 posters
Page 1 of 1
[BUGS] Grail Crier
Hi there,
A security-bug in the Grail Crier page. It is possible to add html to the message you submit. People who want to (they suck) can abuse this by for example adding scripts into your page.
So, it is little work to fix this, but quite important to prevent others from doing harm to the game.
Cheers,
JuliusV
A security-bug in the Grail Crier page. It is possible to add html to the message you submit. People who want to (they suck) can abuse this by for example adding scripts into your page.
So, it is little work to fix this, but quite important to prevent others from doing harm to the game.
Cheers,
JuliusV
JuliusV- Seeker
- Number of posts : 86
Registration date : 2008-09-19
Thanks
Thank you Julius,
I did know that 'they' could add code and that such text boxes are a way to kill a game. I didn't know that solving this problem was that easy
I always used "nl2br" but now I can use both
I guess I will also do this with all other text boxes and with the letters.
I did know that 'they' could add code and that such text boxes are a way to kill a game. I didn't know that solving this problem was that easy
I always used "nl2br" but now I can use both
I guess I will also do this with all other text boxes and with the letters.
Page 1 of 1
Permissions in this forum:
You cannot reply to topics in this forum
|
|