Similar to Cross Site Scripting vulnerability

[_-_-_Adam]

Hi all,

My user name is tilde character tilde character Adam

~~Adam

when I look for my posts in the forum, it comes up with someone elses posts. (I'm assuming someone called "adam" without the tildes in front).

Also my join date is wrong, most likely related to the incorrect user.

I joined this year but it says I joined in 2001.

So it looks as though the Username field is not being parsed and stored in the database properly. To compound this instead of using a numerical ID field to search for poosts from a User, the website is using the Username to search for the posts, not a good idea.

 

[planet10]

tilde is an illegal character for a unser name. Causes all sorts of havok. We haven't gotten the moniker parser working properly. Please provide another user name a>z (caps OK), 0>9, -, space, _

dave

 

[_-_-_Adam]

where do I change it? had a quick look but can't find it... 🙁

 

[planet10]

You can't change it... it takes an admin. Just mail your choice to me and i'll fix it.

dave