Welcome to HBH! If you had an account on hellboundhacker.org you will need to reset your password using the Lost Password system before you will be able to login.

Security error (i think. not certain)

  1. Home
  2. Forum
  3. Bugs
  4. Security error (i think. not certain)

ghost's Avatar

ghost

0 0

Since we all have our own profile pages now, couldn't, in theory, someone make an account named "../index.php%00" and deface the main page?


SySTeM's Avatar

SySTeM

-=[TheOutlaw]=-
20 0

No, because their username would contain invalid characters


ghost's Avatar

ghost

0 0

Ok. Thats good. Just makin sure ;)

If those characters were allowed, it would work….right?


ghost's Avatar

ghost

0 0

or ../index.php? And yes, it would work if it was unfiltered