Basicly. i belive that rev is xxs cross scriptable.
All thats needed is to set your motto to <script>alert('XXS')</script> and on online, it sends an alert.
Does anybody have a fix for this?
The fix will be largely appreciated!
Also, you may want to know:
Whats is XXS...
in class_core.php, whats do i edit this to:
case "client":
$users->createSSO($_SESSION['user']['id']);
$users->updateUser($_SESSION['user']['id'], 'ip_last', $_SERVER['REMOTE_ADDR']);
$template->setParams('sso', $users->getInfo($_SESSION['user']['id'], 'auth_ticket'));
break;
To get Bfly...
Hey, some hotels in the shockwave section shoudn't be there (i think)
http://play.thehabbos.org/ImpactHotel3 (is a R63)
http://play.thehabbos.org/fhftw (Dead URL)
http://play.thehabbos.org/Oldretro (Isnt Shockwave)
there is more but i don't want to bother you to much :D