CNB YA cookies and dynamic siggies

Posted: Sat Jan 22, 2005 9:50 am

If your using a dynamic siggy. Please make a seperate copy of phpnukes mainfile.php without the CNB YA include for mainfileend.php.

Rename it something cool and change the protection line to reflect the new filename.

Reason you will probably get banned from forums because it sets all the CNB YA test cookies if users viewing your siggy don't have their browsers set to ignore third party remote cookies.

Any questions? contact dev/null hehe just kidding but this is not a standard phpnuke feature though widely used. This is proof of concept why remote avatars are evil and should not be allowed period.

Posted: Sat Jan 22, 2005 10:06 am

I should add this isn't exclusive to remote avatars any remote image is a risk. If you have the space its safer to to allow file uploads with a well written script then it is to allow remotely linked images.