Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Anonymous uploader and comments
09-26-2011, 07:07 PM
Post: #1
Anonymous uploader and comments
Security issue: forum is revealing uploader's username when a new thread is opened for comments. First post always says 'Torrent uploaded by <username>' despite torrent being uploaded anonymously. This is visible, there are also owner_* and forum_* POST variables inside form which calls createthread.php, those can also be used to determine who the uploader is.

"Success is the sole earthly judge of right and wrong." -- Herr Wolf
Find all posts by this user
Quote this message in a reply
09-26-2011, 09:18 PM
Post: #2
RE: Anonymous uploader and comments
(09-26-2011 07:07 PM)Armilus Wrote:  those can also be used to determine who the uploader is.

Well, their username. Wink

"He that saith he abideth in him ought himself also so to walk, even as he walked." -- 1 John 2:6
"Whatever affects one directly, affects all indirectly... This is the interrelated structure of reality." -- Martin Luther King Jr.
"He that answereth a matter before he heareth it, it is folly and shame unto him." -- Proverbs 18:13
"Everyone thinks of changing the world, but no one thinks of changing himself." -- Leo Tolstoy
"To love is to be vulnerable" -- C.S Lewis

The Kingdom of God is within you! -- Luke 17:20-21

https://duckduckgo.com/
Find all posts by this user
Quote this message in a reply
09-27-2011, 02:25 AM
Post: #3
RE: Anonymous uploader and comments
Noted, I have an idea for a fix when we get to it.. if you open it up yourself (at least for me) it's denoted uploaded by tracker. So, in the meantime, put a comment on your own post, then edit the text where it says who it was upped by -- if that doesn't work report it and we'll delete the thread if you want to be totally anonymous.

There are no others, there is only us.
http://FastTadpole.com/
Visit this user's website Find all posts by this user
Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread: 1 Guest(s)