Session stealers.

[Plank]

what do session stealers actually do? because i think i clicked on one

[Joltersoft]

They get onto your habbo account

[--ss--]

what do session stealers actually do? because i think i clicked on one

Not sure exactly how they work but they steal your session id from you cookies and logs in the person who set the stealer on

[Plank]

i wasn't on habbo, but can they still find out what i type ect. now?

[Kardan]

to fansite owners/forum owners - you can filter certain things to make these exploits not work directly from links on your forum.

filter these terms: ********* - *********

There you go admins. Don't know if it'll work or not.

[A4AOwen]

Hover your mouse over the link and in the bottom left hand corner you can see the link, if you don't trust it don't click it.

[J1MI]

There you go admins. Don't know if it'll work or not.

Thanks Kardan, i'll look into this.

[sim]

You will be 100% fine if you werent logged into Habbo and you will be 100% fine if you had logged in for more than 10 minutes. Each 'Session' on Habbo lasts exactly 10 minutes, they do not get your password, they just "steal your session" and just get the rest of the time on that session so it is VERY unlikely they can steal your stuff, because they will have to RE-AUTHENICATE after 10 mins, and they need a password to do that. Plus if your still on the hotel after 10 mins then the sessions has expired and is TOTALLY USELESS. To avoid this if you think youve clicked one, log out and then log in again, as this starts a NEW session, meaning the session code they are on will become invalid.

Hope that helps =]

[timROGERS]

There you go admins. Don't know if it'll work or not.

They won't work, because people are posting them as TinyURL links. TinyURL masks the URL, so none of the actual URL can be seen. Therefore, the only way to stop it is by filtering tinyurl.

[Kardan]

They won't work, because people are posting them as TinyURL links. TinyURL masks the URL, so none of the actual URL can be seen. Therefore, the only way to stop it is by filtering tinyurl.

There's your solution then.

And the instructions I gave above are to stop it happening directly on the forum I believe, not to stop masking the URL.