Well in a rather short amount of time Justin has managed to hack the comments system. I’d like to give him lots of credit for the ingenuity but it was more on account of me being lazy and forgetting something. However, thanks to that minor act, I am now much more secure. Kudos to you Justin if you find another way.
If anyone knows about general hacks or different types please discuss in the comments and help us all learn how to protect ourselves.
As of right now I can contribute:
Mysql Injections: Using escape characters to change the syntax of a mysql query. Thus letting you do pretty much whatever you want.
Javascript Insertion: As Justin did. Allowing for redirects and other nasty things.
Taking advantage of superglobals and forms: Using foreign post documents to add uncontrolled data and declare variables.
There are others but I don’t know much about them and often are stopped using methods to prevent these 3. If you know others please share.
Until then shatter a cube, not my website!
General warning: I don’t suggest attempting hacks like this unless you like the idea of my boomstick of banning up your a**.
I am commenting cause it is so cool to do.
If I was capable of hacking your website, I never would due too your general warning. I think you may have meant bRoomstick, not boomstick. But either way, it is enough to keep me from hacking.
Anyways. I don’t like being called a noob. Or maybe I do… I have no idea what it means!
The term boomstick comes from a rich history of video game terminology and "B" Movies. If you have never seen the movie "Army of Darkness" I highly suggest you see it. It isn’t exactly the pinnacle of movie making but it made my belly jiggle.
Noob also stems from video game terminology. "A new player" which beget "Newbie" which beget "Newb" which beget "Noob" which beget "n00b" and so forth and so on. To rid yourself of the Noob title, you merely need to post more. I’ll get a FAQ up about the different rankings and member types soon, so fear not.
FYI: Army of Darkness is playing on Sci Fi this weekend
I would suggest not seeing Army of Darkness. That was the worst movie that I have watched with Richard. It is a horrible movie and really is not even funny. The only reason I sat through the whole thing is because Richard was there.