|
|
Joined: May 1999
Posts: 23
Journeyman
|
Journeyman
Joined: May 1999
Posts: 23 |
dorate*.php allow to invoke themselves through GET method and they don't check value of $rating, which allows any user to specify rating greater than 5 or lower than 1. I've rated Allen 10 stars and now he's got 6 stars []/forum/images/icons/smile.gif[/] https://www.ubbdev.com/threads/php/showprofile.php?User=AllenAyres&What=ubbthreads
Greetings, Piotr
|
|
|
|
Joined: May 1999
Posts: 3,039
Guru
|
Guru
Joined: May 1999
Posts: 3,039 |
Thanks for the info []/forum/images/icons/wink.gif[/]
UBB.threads Developer
|
|
|
|
Joined: May 1999
Posts: 3,039
Guru
|
Guru
Joined: May 1999
Posts: 3,039 |
Ah ok. Looks like I need to change that to be case insensitive on the username check. Thanks again.
UBB.threads Developer
|
|
|
Donate to UBBDev today to help aid in Operational, Server and Script Maintenance, and Development costs.
Please also see our parent organization VNC Web Services if you're in the need of a new UBB.threads Install or Upgrade, Site/Server Migrations, or Security and Coding Services.
|
|
Posts: 70
Joined: January 2007
|
|
Forums63
Topics37,573
Posts293,925
Members13,849
|
Most Online5,166 Sep 15th, 2019
|
|
Currently Online
Topics Created
Posts Made
Users Online
Birthdays
|
|
|
|
|