Honesty Rocks! truth rules.

Security Hole With Posting Credits

HOME      >>       Staff Room

Johnny

I've found a bug in the credit system. It's something only moderators or higher can do, but it's easily abuseable. I'll trust you all to not abuse it if I post it up here, so here goes:Apparently if you make a large post and merge it with another [or itself] to make it smaller, you don't lose the credits you gained from the big post. So if you were to post a bunch of really long nonsense posts, but then merge them into one that was short and on-topic, you could get away with a ton of credits you didn't really earn.I'm hoping this is something that OpaQue can fix, but if not I'd like to ask all staff members not to abuse this. I know we have to merge posts if they're doubled and such, but if it's a super long post that was doubled, you might as well just delete one. Please don't merge your own posts, you can just edit them.All credit goes to me for being a genius and finding this out of pure boredom at work.


Dooga

Maybe you were trying to exploit the system! tsk tsk tskJust kidding! Kidding! :lol:


Johnny

Yup, that too.:lol:


BuffaloHelp

Are you positive that this only works for mod or higher?I found out long ago that even in the No Post Count zone, when a post is deleted the member WILL lose hosting credits. I would think that No Post Count earned nothing thus lose nothing...but it's not the case.


Johnny

Well, anyone can benefit from it, but only a mod or higher can activate it, since it requires merging posts. It won't work with editing or deleting, as we already know. As far as other mod abilities go, I doubt it would work any other way, but I didn't really do much testing of split and move. I just know for a fact that merged posts aren't considered edited or deleted, even if you do one or the other while merging. Hence a loophole.


BuffaloHelp

OpaQue was both surprised and pleased to find this bug in his code. He will test it out further and see if he can improve the script.Nice find, Johnny! :lol:


Kubi

Thank god SM didn't know about this. :lol:


Johnny

OpaQue was both surprised and pleased to find this bug in his code. He will test it out further and see if he can improve the script.
Nice find, Johnny! :lol:


I live to serve, however minimal. :lol:

Thank god SM didn't know about this. :(

Haha, so true, so true.

Kubi

Opaque is one experienced guy. :lol:. I'm sure he'll fix it soone enough. In the mean time....*merges a bunch of topics*. Just kidding :lol:.Johnny, can I get a Dr. Pepper over here? *Just kidding, again*


rejected

Good find!Heh, SM wouldn't have cared about the credits too much, I think he would like it better if he post count stayed the same after merging them..


Johnny

Lol, also true. The poor guy is way too obsessed with that post count of his...like being the most talkative person on the planet makes you any cooler than the rest of us.He sure is popular though. And he does help out T17 in different ways. So kudos to him on that.