Home : Products : Gossamer Forum : Discussion :

Products: Gossamer Forum: Discussion: Re: [jagerman] url escaping bug: Edit Log

Here is the list of edits for this post
Re: [jagerman] url escaping bug
In Reply To:
The redirect is to protect people who are using the query-based authentication. If we were to link directly, someone could post a link "Click here" which takes you to some CGI on their homepage which looks for session ID numbers, and then using that they gain access to your account and change your password and e-mail, essentially stealing your account.

Hm, how would someone go about this?

Surely this would render 95% of the web forums out there insecure? Or is this specific to GTForum?

- wil

Last edited by:

Wil: Mar 13, 2002, 1:50 AM

Edit Log: