ONLINE NOW: 39 LAST 24 HOURS: 116
« First | < | > | Last » |
Due to a security hole involving CSRF (Cross Site Request Forgery) all image tags have been disabled across the site until further notice. This flaw was discovered and tested by myself so nobody got the chance to exploit it.
The short story is I wrote a small script and hosted it on an external server, then linked to it with an image tag in a forum post. The end result with a bit of fancy code was that anybody viewing the thread would see a dead linked image and leave their gang without any indication to them as to what happened. This could also be exploited to remove flags, force people to buy items from a market stand, etc. A fix for this exploit is currently being coded.
The short story is I wrote a small script and hosted it on an external server, then linked to it with an image tag in a forum post. The end result with a bit of fancy code was that anybody viewing the thread would see a dead linked image and leave their gang without any indication to them as to what happened. This could also be exploited to remove flags, force people to buy items from a market stand, etc. A fix for this exploit is currently being coded.
Thanatos
" That could have been really bad."
kukker
"seond be happy zorg were the first to see it no i was not going to misuse it if i saw it "
anialator
" Damn thats some srs bizzniss right there. Good to see you caught it fast "
HappyDays
"sounds cool, you should have used it for aprils fools day "
Pie
"And who says Zorg does no work on Legacy?"
PatBattle
"wow, nice catch zorg "
darp
"Good catch. Potential meltdown averted."
CannOwns
"It wouldn't have been exploited anyway, Emperor doesn't play anymore."
LordofD
"wow, really good catch Zorg! "
ExDeath
"Well that was close "
Matty
"That would of made some bad things happen "
dagreek
"Awesome... Good to know that exploits are being caught and dealt with! go zorg!"
Lupee101
"Haha it looks like Pie was the answer to his question "
inFamous
"wtf zorgs the creater? "
Nemesis
"Grrr, I was wondering why I can't see anyone's sig."
TheMaleMan
"imagine what could have happened "
Jess
""And who says Zorg does no work on Legacy?" - Pie"
Guilt
"Glad two blogs were posted on the same day. Almost a month since the last update you could have done in 2 sentences... Phew! Work!"
Larse
"whaaaaaaaa where are the pics whaaaaaa"
Halloween 2023
- Updated by Pie
Meep Coin
- Updated by Pie
Meepcoin
- Updated by Pie
Halloween 2023
- Updated by Pie
- Updated by Pie
Meep Coin
- Updated by Pie
Meepcoin
- Updated by Pie
Halloween 2023
- Updated by Pie