UPDATE - Habbo now has logout tokens

[Jxhn]

http://www.habbo.co.uk/**************_ok?origin=popup&token=6d9ce481b4

Thanks to m- I mean whoever started that logout thing.

[Mario]

fix link

[Hazza]

http://www.habbo.co.uk/**************_ok?origin=popup&token=6d9ce481b4

Thanks to m- I mean whoever started that logout thing.

Whats this about?!
:S

[Mr.Sam]

before it was habbo.co.uk/logout or something similar and people were using the [img] tags to log people out, now they use tokens everyones log out url will be different and that can not happen

[Jxhn]

I can't fix the link all it says is "/account /logout".

It's because people could put the logout url in an image tag to log people out.

[madchild24]

it is still possible i'm sure, just harder..

[toxic]

There goes my log-out site, fun while it lasted.

[Invent]

it is still possible i'm sure, just harder..

You defaintely can't do the [img] thing as the tokens are unique to each jsessionid.

[GoldenMerc]

Does that mean session stealers return?

[Decode]

Does that mean session stealers return?
No, the logout token will be randomly generated and will have nothing to do with your session :) The logout token is to stop people loging people out by http://habbo.co.uk/account//logout/

[efq]

So if you get hacked they cant log you out until you log off?

[Decode]

No, the logout token is just to stop people loging you out when you wern't expecting it. It wont stop people going on your account when you are on it :(

[PriceTags]

Now I know why it didn't log me out when I got banned :(.

[Disneychanne1]

before it was habbo.co.uk/logout or something similar and people were using the [img] tags to log people out, now they use tokens everyones log out url will be different and that can not happen
Huh? You mean when scammers logged people out and then got them to login on their fake sites?

[LoveToStack]

Not at all, it's nout to do with scammers. It used to be when you logged off of habbo BY YOUR OWN WILL, that you were directed by a link, to the URL;
www.habbo.co.uk//acount//logout (http://www.habbo.co.uk/**************)
So what people could do was create hyperlinks to that URL then if you clicked it then you'd dc or they could wrap it as an image by doing then the forum or w/e would think it was loading an image but really it would just be logging you out. ;)

[HotelUser]

Dentalrice's little logout thing will no longer work?

shame:rolleyes:.

[Ardemax]

hmm, so basiclly scammers/hackers did [img]then the link /yourhabboname[img] and it logged you out? why didnt habbo do this sooner lol

[today]

Dentalrice's little logout thing will no longer work?

shame:rolleyes:.
He removed it days ago :S

[Fehm]

More security tbh =]

[Nereo]

All this techie talk is confusing. So is it a good thing or not? :P

[LoveToStack]

tis a good thing. :)

[Jxhn]

hmm, so basiclly scammers/hackers did [img]then the link /yourhabboname[img] and it logged you out? why didnt habbo do this sooner lol

No it the same link for everyone.

[kk.]

tbh, why cant they just use a pop saying are you sure you wish to logout? or close the window

[Mint]

Someone wil find a way around it.