Loging in as another person in the forum

Post by **Turbine** » Tue Jan 31, 2006 7:50 pm

There is another forum that I go to, and I just found out about a little bug. Well I dont think that it is a bug. But let's call it that.

If you log on in to the forum, click on the buton where it asks you if you want to remember your username on that forum. Wait for the cookie to be writen.

Then go in to the cookie file, edit it, by replacing your email listed in the file, with an e-mail of another person on the forum. Restart your PC, and go back to the forum. And...

You are now loged in as someone else.

Ha! I am a genious.

[edit] Anways, I reported it to the mod's there.

Post by **dmmh** » Tue Jan 31, 2006 8:01 pm

sounds like a shitty written BBS

Post by **Turbine** » Tue Jan 31, 2006 8:16 pm

Well the board is not bad, it is very clean and simple.
But the cookie is where it's at.

Post by **+JuggerNaut+** » Tue Jan 31, 2006 8:31 pm

Turbine wrote:Well the board is not bad, it is very clean and simple.
But the cookie is where it's at.

simple indeed.

Post by **BlueGene** » Tue Jan 31, 2006 8:56 pm

That's messed up, maybe it's a fluke? Try making a post with the other account, probally wont let you?

Post by **ilumos** » Tue Jan 31, 2006 10:13 pm

That's shitty scripting indeed... All you need is a unique key.

Post by **diego** » Tue Jan 31, 2006 10:37 pm

The session should betray your betrayal, but it sounds like a very bad board indeed.

Post by **dmmh** » Tue Jan 31, 2006 10:51 pm

dmmh wrote:sounds like a shitty written BBS