| We hope you enjoy your visit. You're currently viewing our forum as a guest. This means you are limited to certain areas of the board and there are some features you can't use. If you join our community, you'll be able to access member-only sections, and use many member-only features such as customizing your profile, sending personal messages, and voting in polls. Registration is simple, fast, and completely free. Join our community! If you're already a member please log in to your account to access all of our features: |
| IMPORTANT | |
|---|---|
| Tweet Topic Started: Feb 5 2005, 04:16 PM (1,919 Views) | |
| BikersForums | Feb 5 2005, 08:54 PM Post #16 |
|
Member
  ![]](../../../../0/1/0/p601690/pipright.png)
|
i know i can easy do anything tho 
|
 |
 
|
| Seth | Feb 5 2005, 08:57 PM Post #17 |
I has a pony
|
Gogf, he's just closing the <textarea> and then writing in HTML code. Odd, but safe if you know what you're doing. |
|
|
|
| Gogf | Feb 5 2005, 09:03 PM Post #18 |
|
Indescribable
|
Where? In the board wrappers? |
|
|
|
| Seth | Feb 5 2005, 09:04 PM Post #19 |
|
I has a pony
|
No, Admin Notepad. |
|
|
|
| Gogf | Feb 5 2005, 09:08 PM Post #20 |
|
Indescribable
|
Oh. Time to start experimenting with this on a test board... EDIT: I've succeeded in making it so that I can't save the Admin Notes anymore. |
|
|
|
| Sipefree | Feb 6 2005, 08:00 AM Post #21 |
|
Moved to paid hosting.
|
^ Yes, I managed that as well. I just pressed the 'Back' button on my browser. This begs the question, is this possible in the usercp? |
|
|
|
| mathiaus | Feb 6 2005, 08:16 AM Post #22 |
mathiaus maximus™
|
|
|
|
|
| RedKrazyKid | Feb 6 2005, 11:43 AM Post #23 |
|
Member
|
Nope, not at all. I've tried manipulating the web page itself and editing the forms, I couldn't do crap. It's pretty darn safe in the UserCP if you ask me. |
|
|
|
| Paper | Oct 15 2005, 12:41 PM Post #24 |
Member
|
Brandon told me this will not be in the next version of IF, but I hope it is. It makes way for a whole new stlye of coding for the Admin CP. |
|
|
|
| Answer | Oct 19 2005, 09:12 PM Post #25 |
Allen Iverson
|
I did then i can't edit the notepad anymore. |
|
|
|
| Coded Death | Nov 3 2005, 10:21 PM Post #26 |
|
ˇ ® €°Đč®
|
see? newbies with codes...dangerous thing...betcha half of em dont kno that if u disable javascript, it will all function normally... as for its safety, there is really no way to open access to the ACP with javascript unless you can already enter it, or know for a fact that 1) there is an admin currently using the ACP and thus a session open and 2) know what the adsess is as for guessing the numbers...theres a reason theres 16 of the numbers/letters...note: 20922789888000 possible combinations....thats almost 21 billion combinations...how long would it take u to send that many tries? Could u do it before the session ended? Could u do it before IF either went down or killed your connections for a DoS attack attempt? doubt it As we speak I currently know 2 separate codes that take advantage of this...neither one is useful for anything, but there is a 3rd that is currently a rather large project just starting...and thats all I'm allowed to say at this time regarding that. If anyone has any questions, feel free to contact me via whatever methods you feel necessary (though PM is not a good one...I rarely check it) |
|
|
|
| Paper | Nov 4 2005, 04:03 PM Post #27 |
|
Member
|
I'd firstly like to say that this code is no more dangerous than the Easy Admin CP code (A code that allows the administrator to access the wrappers without directly logging in to their Admin CP). Secondly, it is no more dangerous than a code that could be made to record your password details on the main forum. You shouldn’t put any code anywhere unless you trust the source.
Thanks Death  
You could always disable javascript and then remove the code. Problem solved. Whilst making the code support ticket system I messed it up several times. It is very annoying when you forget to put javascript back on.
|
|
|
|
| Placeholderplaceholder | Nov 5 2005, 01:42 AM Post #28 |
|
Quit
|
i dunno what ur talking about |
|
|
|
| Coded Death | Nov 5 2005, 08:01 AM Post #29 |
|
ˇ ® €°Đč®
|
that is why you dont mess with codes...leave it to those of us with at least SOME knowledge of what actually goes on behind the scenes while you look at a website. |
|
|
|
| The Mustang | Nov 5 2005, 08:37 AM Post #30 |
|
When the rich wage war it's the poor who die.
|
Another thing is, when you rename your board, and try to go back the Admin CP is gone, you should have to wait at least 5 mintues before all your info is carried over or something, in case they wanna go back and set the name back, cause I lost my site like this. |
|
|
|
| 1 user reading this topic (1 Guest and 0 Anonymous) | |
| Go to Next Page | |
| « Previous Topic · zIFBoards Discussion · Next Topic » |
| Track Topic · E-mail Topic |
 11:33 AM Jul 11
|