It's not SQLI, it's just improper validation and a logic error
xxerox was bumped down to the B list
Put me on the C list, for those who wanna be mod just for and giggles.
numb i nominate sachy feel free to go fk yourself. I do not want to mod this site.
Bebop xxerox Bebop I changed it, but is so awesome you won't even show it ;) You will probbbaly send the same picture again ;)
if you do change it that's abusing your temporary powers and i might have to take action
xxerox Bebop it's still the same you didnt even change it
Betrayal The xxerox The Betrayal The They may have given the server improper instructions that caused it to start sending out pms on its own. It's not. There is no "probably". I found the exploit and sent its instructions to Lucid.
The xxerox The Betrayal The They may have given the server improper instructions that caused it to start sending out pms on its own. You are right, there is an exploit. And it's probably SQLI.
this has been the mod forum description since before this happened we know who the real king is
Sorry, you were wording it like it is something that no one can be blamed on.
xxerox The Betrayal The They may have given the server improper instructions that caused it to start sending out pms on its own. If the attacker exploited it with SQLI then it's definitely possible to find a loophole to send mass messages using the PM site. Also, SQLI is exploiting the servers since it's server based. You have to access the servers to retrieve the data. Inside of the code, the attacker includes all of the recipients that receive the PM and the message as well in one long line.
xxerox The Betrayal The They may have given the server improper instructions that caused it to start sending out pms on its own. You just restated what I said. There is an exploit someone used to spam messages.
The Betrayal The They may have given the server improper instructions that caused it to start sending out pms on its own. I don't think this is it. I think someone purposly exploted the severs to do that. It is not something that can happen on its own and just with that messages.
Betrayal The They may have given the server improper instructions that caused it to start sending out pms on its own. So you found an actual SQL injection route, or are you just speculating? Because I found an actual exploit that causes his server to keep sending the same pm over and over again.
I believe the spammer(s) found a way to extend this exploit to use it on multiple people en masse.
The They may have given the server improper instructions that caused it to start sending out pms on its own. Then why is it giving this exact copy-pasta?
The They may have given the server improper instructions that caused it to start sending out pms on its own. Nah the attacker is using some form of SQL injections to mass send the PMs. All he has to do is copy and paste the code and repeat using software or in the browser.
They may have given the server improper instructions that caused it to start sending out pms on its own.
The I don't want to go into too much detail, but the true spammer may actually be Lucid's pm server. Well, now thats impossible.
I don't see how can a Server get an AI and start spamming a troll copypasta.
