Filter these

[Mr.Sam]

http://www.habboxforum.com/showthread.php?p=5008824&styleid=53[/IMG]
http://www.habboxforum.com/showthread.php?p=5008824&styleid=45[/IMG]
http://www.habboxforum.com/showthread.php?p=5008824&styleid=15[/IMG]
http://www.habboxforum.com/showthread.php?p=5008824&styleid=19[/IMG]
http://www.habboxforum.com/showthread.php?p=5008824&styleid=56[/IMG]
http://www.habboxforum.com/showthread.php?p=5008824&styleid=35[/IMG]
http://www.habboxforum.com/showthread.php?p=5008824&styleid=48[/IMG]
http://www.habboxforum.com/showthread.php?p=5008824&styleid=62[/IMG]

When people use those with complete tags it will change the default forum skin to that they have posted (after they click a forum link).

for example if someone posted a complete
http://www.habboxforum.com/showthread.php?p=5008824&styleid=53
and I read the thread, then clicked new post that page and the following will be the pink skin.

[Leetzgirl]

*Removed*

Edited by ,Jess, (Forum Super Moderator): Please do not make pointless posts.

[Dentafrice]

:o what if the user was logged into the admin control panel.. kidding.

[Kardan]

*Removed*

ITS TURNED PINK.

Yeah, filter them.

[today]

Didnt turn pink for me lol

[Mr.Sam]

because you used quick reply, when you refresh or change page it'll change.

[Meanies]

Didnt turn pink for me lol

went blue for me :O

edit; now its gone pink :O

[NN-Dom]

Awww yeh. thats poo

[today]

which idiot did mobile style.

[Mr.Sam]

gWOW-Dom was there really a need to do the mobile and habbo log out ones? -.-

[Yoshimitsui]

Can you lot not like find anything better to do than to make these stupid changing scripts!

[Dentafrice]

LOOL, seems I started it on here :(

[Mr.Sam]

It's not changing scripts, when urls are put into [img] tags they do not appear at all but the browser seems to load the url anyway.

[Yoshimitsui]

It's not changing scripts, when urls are put into [img] tags they do not appear at all but the browser seems to load the url anyway.

However they do it it's childish!

[today]

However they do it it's childish!
Tell me about it, fgs.

[Favourtism]

Its quite easy but needs to be patched

[NN-Dom]

Haha, Press F5, just a joke ;)

*removed*

Edited by SyrupyMonkey (Forum Super Moderator): In compliance with this thread: http://www.habboxforum.com/showthread.php?p=5009845

[Nick.]

*removed*
could be annoying.

Edited by SyrupyMonkey (Forum Super Moderator): In compliance with this thread: http://www.habboxforum.com/showthread.php?p=5009845

[today]

No it really is :l

[Mr.Sam]

would be useful if they could somehow make it so you could only use

.png[/img]
.gif[/img]

and so on, meaning any links would be filtered.

[Dentafrice]

then you can't have dynamic signatures :(

[Favourtism]

Lucky that no one has figured out another one which me and Mecto know can be done.

I think dynamic sigs are a small price for skin changing etc

[AlexOC]

i get mobile skin on reply

[Favourtism]

Yeah, cause someone put the mobileskin code into an img tag on the first page -.-

[bo$$]

this is pissing me off now, lol. everytime I change pages it goes to mobile.

[Favourtism]

Yeah, really annoying.

Hope it gets patched before people find out new ways that annoy people via it!

[Yoshimitsui]

Or just infract the ones who want to to do it if it's going to turn into an annoying craze!

[Invent]

I'll speak to MAD about this and I'll see if I can code something to only allow valid images.

[Hiro]

my page just flickered from pink to blue to orange! O_O!

http://clubhabboforum.net/?styleid=34

[NN-Dom]

The mobile skin has nothing to do with me :rolleyes:
edit: and the yellow skin hehe:rolleyes:

[AlexOC]

Yeah, cause someone put the mobileskin code into an img tag on the first page -.-

yes i know smart pants, i was just agreeing

dont give me that

[Jordy]

Awww yeh. thats poo
[IMG]http://www.habboxforum.com/showthread.php?p=5008824&styleid=62[/IMG*][IMG]http://www.habbo.com/**************[/IMG*]This is the stupid post logging people out of Habbo and changing people to the mobile skin. Just grow up a little will you? Do that small thing?

btw I included stars so it wouldn't do it again, don't quote him fgs. Nick and Dom have also done it again on Page 2...

[NN-Dom]

This is the stupid post logging people out of Habbo and changing people to the mobile skin. Just grow up a little will you? Do that small thing?

btw I included stars so it wouldn't do it again, don't quote him fgs. Nick and Dom have also done it again on Page 2...

Sorry, that was just a little joke.
I did it again on page 2 to revert people back to the normal skin :)

Sorry if i annoyed anyone ;)

[Jordy]

Sorry, that was just a little joke.
I did it again on page 2 to revert people back to the normal skin :)Yes but I was using retro blue skin so I'm not very grateful and also in the mobile skin you can't see images so your stuck in the mobile skin till you move yourself out of it.

If this isn't fixed soon I'll be forced to take a break from the forum as it's unbearable to use.

[Leetzgirl]

People can be idiots these days

[DrLacero]

BAH! That was quite funny, Kudos to whoever found it.

[Jordy]

People can be idiots these daysAnd the absolutely stupid thing is your doing it yourself, the gap in your signature gives it away but a quick source check confirms this. At least others have the balls to admit it and don't hide it, it's not even funny now as loads of other people in the thread have done it.

You've got an awful sense of humour and are one of the biggest hypocrites I've seen on this forum in a while.

[Leetzgirl]

And the absolutely stupid thing is your doing it yourself, the gap in your signature gives it away but a quick source check confirms this. At least others have the balls to admit it and don't hide it, it's not even funny now as loads of other people in the thread have done it.

H


Lol, true -,-

[Pyroka]

And the absolutely stupid thing is your doing it yourself, the gap in your signature gives it away but a quick source check confirms this. At least others have the balls to admit it and don't hide it, it's not even funny now as loads of other people in the thread have done it.

H

I lol'd... This Habbox Forum Mobile page is ugly, and mean. I think someone defo needs to find a plugin to filter out this method. No doubt someone should've made one on the VBulletin members area?

[Leetzgirl]

MAD away so he cant do anything

[nvrspk4]

Congrats while it lasted, quite ingenious honestly. We will be implementing a simple patch, hopefully tomorrow morning. (Credit to Pyroka)

[Jxhn]

Congrats while it lasted, quite ingenious honestly. We will be implementing a simple patch, hopefully tomorrow morning. (Credit to Pyroka)
Yes, very ingenious. I wonder who started it off.

I'm pretty sure things like these are impossible to patch without adding a security token to each form.

Look up CSRF/XSRF.

[nvrspk4]

Yes, very ingenious. I wonder who started it off.

I'm pretty sure things like these are impossible to patch without adding a security token to each form.

Look up CSRF/XSRF.

I would show you the simple patch however I feel like someone would find a workaround so we'll let them discover it without our help.

[Decode]

I would show you the simple patch however I feel like someone would find a workaround so we'll let them discover it without our help.
Im sure people will find a way arround it anyway :P

Yes, very ingenious. I wonder who started it off.

I'm pretty sure things like these are impossible to patch without adding a security token to each form.

Look up CSRF/XSRF.
You could simply change the change style form at the bottom of the page to use $_POST then it cannot be changed unless someone submits it.

[Jxhn]

You could simply change the change style form at the bottom of the page to use $_POST then it cannot be changed unless someone submits it.

It is still possible, just harder. I won't explain how.

[Jxhn]

It is still possible, just harder. I won't explain how.

EDIT: It's also possible to do this with Habbox's radio request system (I won't say how). I'm sure 300 of the same request from different people would piss off the DJs, although it might convince them to play some death metal.

EDIT: I pressed quote instead of edit by accident.

EDIT: I was past the edit limit anyway.

[Favourtism]

yes i know smart pants, i was just agreeing

dont give me that
I didnt mean the '-.-' at you, it was directed at the noobs who are doing it.


EDIT: It's also possible to do this with Habbox's radio request system (I won't say how). I'm sure 300 of the same request from different people would piss off the DJs, although it might convince them to play some death metal.

EDIT: I pressed quote instead of edit by accident.

EDIT: I was past the edit limit anyway.
Yup. Me and Mecto were testingo n our forum and you can do that. its also is/was(?) possible to log users out and redirect them.

Glad to see that is has/is being patched :)

[J0SH]

Can't you just filter the styleid= or something?

[Pyroka]

That's just filtering out one problem, there's many things they could do with the [IMG] tag. It's not limited to just changing styles on a forum so they needed something more generic. Either way, it's done now.

[Decode]

That's just filtering out one problem, there's many things they could do with the [IMG] tag. It's not limited to just changing styles on a forum so they needed something more generic. Either way, it's done now.
What changes have been made, I can still use image tags.

http://google.com/logo.gif

[Pyroka]

You can still use IMG tags for...? Images? If so, yeah that's pretty much how it was supposed to turn out.

[Decode]

No you can still do [im g]http://habboxforum.com/?styleid=5[/img ]

[Pyroka]

I know you can still input it, but whether it works or not is another matter. :P

[Decode]

It did work, i tried it in my post on the last page :P

[Pyroka]

Omg seriously? LOL

Alright then... Hmmm, I'm not sure then how nvrspk and the techies have done it. I just gave them the code to do it, but it's how they've implemented and customized it.

[Jxhn]

its also is/was(?) possible to log users out and redirect them.

On this forum? This forum has a security token for logging out so it wouldn't have been possible.

[Decode]

I think i might have found another way to do it with javascript.

just testing javascript: switch_id(this, 'style');

EDIT: no doesn't work :(

[Pyroka]

That didn't work. :P

I'd ask you to retype the original style changer to see what happens, or the logout one but I doubt I can say that you won't be banned for it. I'll test it later on tonight, it should be patched but meh... this is the internet.

[Decode]

I don't know how the logout one is done :P When you logout you get a token so if you did [img ]http://habboxforum.com/login.php?do=logout[ /img] it wouldn't work :S

[Mr.Sam]

Yeah, you can't do a log out one because of the token.

[drama]

HOLY MOTHER OF PINK.

[Favourtism]

On this forum? This forum has a security token for logging out so it wouldn't have been possible.
Well, it worked on ClubHabboForum and on urvbstyles.

[Jxhn]

I think i might have found another way to do it with javascript.

just testing javascript: switch_id(this, 'style');

EDIT: no doesn't work :(

vBulletin will have patched javascript in image tags years ago because if it was possible then people would redirect and steal cookies.


Well, it worked on ClubHabboForum and on urvbstyles.

It would work for yourself but not for anyone else.

[Favourtism]

vBulletin will have patched javascript in image tags years ago because if it was possible then people would redirect and steal cookies.



It would work for yourself but not for anyone else.
Nope, someone had it in their sig and everyone was complaining that they were being logged out lol

[Dentafrice]

Logged out of Habbo, not CHF, you can't log someone out of a vBulletin, as it has a security token, try logging yourself out without that token.

[Jxhn]

Nope, someone had it in their sig and everyone was complaining that they were being logged out lol

Logged out of the forums? That can't work, everyone has a different log out token.

EDIT: Denta posted while I was signing up to CHF.