1 Reply by Tycho

(3 replies, posted in PunBB 1.2 bug reports)

Hey guys, the utility of this function is not the subject wink The subject is the possibility to bypass it. Maybe you don't see any utility to this function, personaly I do. We could discuss about it, but in an other subject plz ^^

By the way, it seams quite simple to fix this bug using html_entity_decode  () before checking the message.

Go to forum: PunBB 1.2 bug reports

2 Topic by Tycho

(3 replies, posted in PunBB 1.2 bug reports)

Hi,

Just a little but, it's possible to write censored word using html equivalent for 1 or more letters of this word. Example, if fuck is censored, it's possible to write it using fuck. This is worst than invisible BCC code : using html code it's possible to write links (with invisible BCC code links are dead).


Notice : in order to write fuck (in my previous example), I used fuck, don't think without testing that html code don't work wink

Go to forum: PunBB 1.2 bug reports