Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

Security error (i think. not certain)

  1. Home
  2. Forum
  3. Bugs
  4. Security error (i think. not certain)

ghost's Avatar

ghost

0 0

Since we all have our own profile pages now, couldn't, in theory, someone make an account named "../index.php%00" and deface the main page?


SySTeM's Avatar

SySTeM

-=[TheOutlaw]=-
20 0

No, because their username would contain invalid characters


ghost's Avatar

ghost

0 0

Ok. Thats good. Just makin sure ;)

If those characters were allowed, it would work….right?


ghost's Avatar

ghost

0 0

or ../index.php? And yes, it would work if it was unfiltered