Page 1 of 1

Dynamic signature secirity risk??

Posted: Sun Jun 07, 2009 3:33 pm
by Martyj
I was wondering the security risk in allowing a forum to have dynamic signatures such as
Image

Only thing I see with php is allowing people to view your isp, ip, version of windows, web browser.

What's the risk with CGI scripts?

Re: Dynamic signature secirity risk??

Posted: Sun Jun 07, 2009 4:46 pm
by Falco Girgis
...what? Dude, you are submitting forms via CGI and PHP by even posting on these forums.

CGI, or common gateway interface, is another method of doing the same thing that PHP does, running a script on the server to create/manage/run web pages. Generally you think of Perl being used with CGI.

If you're worried about security risks of things like server-side anything, you shouldn't be on the internet. ;)

Re: Dynamic signature secirity risk??

Posted: Sun Jun 07, 2009 4:49 pm
by M_D_K
what he said ^^
ROFL :lol:

Re: Dynamic signature secirity risk??

Posted: Sun Jun 07, 2009 4:55 pm
by eatcomics
Martyj wrote:I was wondering the security risk in allowing a forum to have dynamic signatures such as
Image

Only thing I see with php is allowing people to view your isp, ip, version of windows, web browser.

What's the risk with CGI scripts?
lolz runescape :lol:

Re: Dynamic signature secirity risk??

Posted: Sun Jun 07, 2009 5:05 pm
by Maevik
Dude, nearly every website you go to today is storing all that information when you visit it anyway. They want to know your browser/resolution/OS to maximize usability and anytime you're banned from somewhere it's cause they know your IP.

Use a firewall and don't put up any info that would give a L337 H@XX0|2 reasons to try to access your system.

Fuck this forum.

Posted: Mon Jun 08, 2009 1:33 am
by Martyj
I'm not worrying about myself. I'm worrying about the website. I know php is server side scripting.

Also who cares if it is for runescape. What's so bad about runescape. How many 3d games do you see written in java? Btw GyroVorbis clearly I know about php seeing as how I coded that image myself.
If you're worried about security risks of things like server-side anything, you shouldn't be on the internet
You shouldn't be telling me about internet stuff seeing as how you didn't do shit on this website to help create it.

Good bye everyone

Re: Dynamic signature secirity risk??

Posted: Mon Jun 08, 2009 10:00 am
by M_D_K
why hello there BJ. why didn't you use your other account?

Re: Dynamic signature secirity risk??

Posted: Mon Jun 08, 2009 12:59 pm
by eatcomics
M_D_K wrote:why hello there BJ. why didn't you use your other account?
Heh, he doesn't get our humor :)

Re: Fuck this forum.

Posted: Mon Jun 08, 2009 7:07 pm
by dandymcgee
Martyj wrote: Good bye everyone
Forum Rules wrote: 1. No farewell threads or posts. (Because you shouldn't say what you don't mean and childish pouting is not tolerated.)

Punishment for violating the above rule is banning and/or account deletion, depending on what I feel like. You can try appealing to me via e-mail if you want, no guarantees.
I spy with my little eye.. someone requesting a ban. ;)