Enigma come!! :D

posted in Site Feedback
View:
Threaded
Linear
Threaded
#1
Laundry
2
Frags
+

Hi!! I hope your day is going well!! <333

just wanted to report 2 lil bugs if thats okay!

#1: there was an old bug where ads would sometimes take up the whole screen, and it's back now :(
https://imgur.com/a/ZcBZstk

#2: security vulnurability with alphanumerics
there was a user a while back that highlighted this error and how it could be a security vulnerability: https://www.vlr.gg/576467/question-mods
where basically whenever you click the user profile, the link would go to an empty page (no user was not deleted, it was always like that)

I can't pinpoint the exact reason without code ofc, but what I can say is that it seems to be a problem with alphanumerics. For example, https://www.vlr.gg/user/4 goes to https://www.vlr.gg/user/4HEAD and https://www.vlr.gg/user/314 goes to https://www.vlr.gg/user/0314

This could either be due to a lack of typechecking or casting the usernames into strings when they start with a number, or php could be interpreting it as vlr.gg/user/<int> instead of vlr.gg/user/<string>, so when the int value is over the bit limit (with https://www.vlr.gg/user/314159265358979323846264) it returns a 404 (paraphrased from yukky).
it's only a small vulnerability because it can be used for ban evasion (as https://www.vlr.gg/576467/question-mods specified), but still something that could be checked out :D

thank you for reading and have a great rest of ur day!! <333

#2
king_bob
-3
Frags
+

imagine how beautiful vlr would be if cw made it instead

#3
enigma
dev
9
Frags
+
  1. forwarding the problem (out of my control)
  2. fixed, thanks
#4
Laundry
2
Frags
+

Goat <333

#6
EpicGamerGamingEpicly
1
Frags
+

stop gatekeeping the cool flags >:(

#5
Zelestia
-2
Frags
+

Snitch

  • Preview
  • Edit
› check that that your post follows the forum rules and guidelines or get formatting help
Sign up or log in to post a comment