Quake3World

There is another forum that I go to, and I just found out about a little bug. Well I dont think that it is a bug. But let's call it that.

If you log on in to the forum, click on the buton where it asks you if you want to remember your username on that forum. Wait for the cookie to be writen.

Then go in to the cookie file, edit it, by replacing your email listed in the file, with an e-mail of another person on the forum. Restart your PC, and go back to the forum. And...

You are now loged in as someone else.

Ha! I am a genious.

[edit] Anways, I reported it to the mod's there.

sounds like a shitty written BBS

Well the board is not bad, it is very clean and simple.
But the cookie is where it's at.

Turbine wrote:Well the board is not bad, it is very clean and simple.
But the cookie is where it's at.

simple indeed.

That's messed up, maybe it's a fluke? Try making a post with the other account, probally wont let you?

That's shitty scripting indeed... All you need is a unique key.

The session should betray your betrayal, but it sounds like a very bad board indeed.

dmmh wrote:sounds like a shitty written BBS