Account creation session hijack bug
Device:
Browser:
OS:
Steps to reproduce:
1. Create account
2. Get redirected to the front page
3. Notice sid is in the URL. This is not secure since I could copy and paste this link not knowing it's my session id. Someone could hijack my session.
Anything else to add:
1
reply
2421 views
Description
Device:
Browser:
OS:
Steps to reproduce:
1. Create account
2. Get redirected to the front page
3. Notice sid is in the URL. This is not secure since I could copy and paste this link not knowing it's my session id. Someone could hijack my session.
Anything else to add:
Browser:
OS:
Steps to reproduce:
1. Create account
2. Get redirected to the front page
3. Notice sid is in the URL. This is not secure since I could copy and paste this link not knowing it's my session id. Someone could hijack my session.
Anything else to add:
Can be used to make Runewords:
Fixed•Go to post
SIDs have been in phpBB topic urls for 20 years and more. If there was a security concern about this I think they would have changed it by then.Auxis wrote: 3 years ago 3. Notice sid is in the URL. This is not secure since I could copy and paste this link not knowing it's my session id. Someone could hijack my session.
SIDs have been in phpBB topic urls for 20 years and more. If there was a security concern about this I think they would have changed it by then.Auxis wrote: 3 years ago 3. Notice sid is in the URL. This is not secure since I could copy and paste this link not knowing it's my session id. Someone could hijack my session.
Similar pages
-
-
-
Is anyone else getting login session expired errors with battle.net
by» » in Forums
Deleted User 77308
-
-
-
-
-
-
Game Creation Issues
by » » in Forums
-
Advertisment
Hide ads
Greetings stranger!
You don't appear to be logged in...Register an account
Start trading, earning trust, and levelling up. Get avatars, likes, bookmarks and more with an account! :)
Support Diablo2.io
You can donate to the site to help support the future of diablo2.io. Donating hides all ads forever.
Latest discussion
Caster (which item) Amulet/Shield/Rings….
cant seem to apply/drag screenshot for trading (linux)
You got really lucky? Then share it with us here =)
Giveaway: Uber Tristram Smiter (Softcore NON-Ladder)
What should I do with this eth 5os 'zerker Axe? (other than sell it)
cant seem to apply/drag screenshot for trading (linux)
You got really lucky? Then share it with us here =)
Giveaway: Uber Tristram Smiter (Softcore NON-Ladder)
What should I do with this eth 5os 'zerker Axe? (other than sell it)
Found a bug or glitch?
If something looks broken please let me know so I can fix it :)
No matches
Auxis
0