This wasn't found by me, it was found by Eevee. I'm just posting about it.
Anyway, it's possible to edit other people's journals. See my most recent journal entry for how to do this.
Anyway, it's possible to edit other people's journals. See my most recent journal entry for how to do this.
Category All / All
Species Unspecified / Any
Size 200 x 200px
File Size 6.5 kB
good lord.... so there actually was a bug like that.
this is kind'a funny, because i tested the same thing back then, when i wasn't a coder here.. submissions deletion, journals deletion, etc.. but never got as far as testing this. i just never had a jornal entry i could edit.
good show, whoever found this out.
it has been fixed. and there's some code audit pending these weekends, so it would become /much/ harder to hack FA, at least not thrue database INSERT and UPDATE statements.
this is kind'a funny, because i tested the same thing back then, when i wasn't a coder here.. submissions deletion, journals deletion, etc.. but never got as far as testing this. i just never had a jornal entry i could edit.
good show, whoever found this out.
it has been fixed. and there's some code audit pending these weekends, so it would become /much/ harder to hack FA, at least not thrue database INSERT and UPDATE statements.
FA+

Comments