Shane Archer
Agent
- Joined
- Dec 10, 1999
- Messages
- 28
In one of the vBulletin hacks installed here, I just (somehow) noticed a bug. On the Total Time Online page here: http://www.hometheaterforum.com/htfo...fo=view_leader
The links to click on the users' names on the left are missing the sessionhash data. It looks like the PHP code is missing the "$" before the session[sessionhash] so it is not getting evaluated.
For a user browsing the site without cookies, clicking on one of those links would cause him/her to become logged out.
The links to click on the users' names on the left are missing the sessionhash data. It looks like the PHP code is missing the "$" before the session[sessionhash] so it is not getting evaluated.
For a user browsing the site without cookies, clicking on one of those links would cause him/her to become logged out.