Page Index Toggle Pages: 1 Send TopicPrint
Normal Topic User Avatars Upload 1.5, filenames can have % (Read 3934 times)
c0ldshadow
New Member
*
Offline


I love YaBB 1G - SP1.2!

Posts: 23
Joined: Jan 28th, 2007
User Avatars Upload 1.5, filenames can have %
Apr 30th, 2008 at 3:48am
Print Post  
if a user's name has a dash in it, there avatar will be uploaded to the server like FS%2DSNIPE.jpg

for a username of FS-SNIPE

isnt this a security issue?

also the avatar will notl even work for users with dashes in there name

it might also be possible other character in the username could cause problems

  
Back to top
 
IP Logged
 
Jeff
God Member
*****
Offline


There are no bugs there
are only features

Posts: 2552
Joined: Jan 14th, 2005
Gender: Male
Re: User Avatars Upload 1.5, filenames can have %
Reply #1 - Apr 30th, 2008 at 9:31pm
Print Post  
  

greetings
Jeff
Back to top
WWW  
IP Logged
 
Page Index Toggle Pages: 1
Send TopicPrint