Bitcoin Forum

Other => Meta => Topic started by: Joel_Jantsen on April 10, 2018, 07:25:59 AM



Title: Hidden Input Boxes on the Merit Page
Post by: Joel_Jantsen on April 10, 2018, 07:25:59 AM
Not sure if anyone has noticed this before but I found something interesting while fiddling on the merit page.Two mysterious hidden inputs.
https://i.imgur.com/TePIa3N.png

What are those ?


Title: Re: Hidden Input Boxes on the Merit Page
Post by: theymos on April 10, 2018, 07:46:29 AM
The last one is your session key, which allows anyone to use your account. Congrats. (I logged you out, invalidating it...)

Hidden form fields are extremely common. You'll find them on virtually every form on the forum. They're hidden from view, not "secret".


Title: Re: Hidden Input Boxes on the Merit Page
Post by: Joel_Jantsen on April 10, 2018, 07:50:40 AM
The last one is your session key, which allows anyone to use your account. Congrats. (I logged you out, invalidating it...)
Oh I never knew that was my session token!Thanks a lot! I did get logged out.

Hidden form fields are extremely common. You'll find them on virtually every form on the forum. They're hidden from view, not "secret".
Yep! If I may ask,what is the other field adjacent to the merit input?


Title: Re: Hidden Input Boxes on the Merit Page
Post by: TMAN on April 10, 2018, 07:51:19 AM
The last one is your session key, which allows anyone to use your account. Congrats. (I logged you out, invalidating it...)

Hidden form fields are extremely common. You'll find them on virtually every form on the forum. They're hidden from view, not "secret".
Theymos to the rescue as always!


Title: Re: Hidden Input Boxes on the Merit Page
Post by: theymos on April 10, 2018, 07:51:45 AM
Yep! If I may ask,what is the other field adjacent to the merit input?

Read the HTML and find its name.


Title: Re: Hidden Input Boxes on the Merit Page
Post by: Joel_Jantsen on April 10, 2018, 07:53:48 AM
Yep! If I may ask,what is the other field adjacent to the merit input?

Read the HTML and find its name.
Got it.msgID [message-id].Thank you!


Title: Re: Hidden Input Boxes on the Merit Page
Post by: Joel_Jantsen on April 10, 2018, 07:58:10 AM
tried to inspecting element in my case I use Chrome. may this is what @theymos means:

why those appear on yours:
1. you're using an unsupported browser (I don't what it's)
2. maybe you were on the slow connection while open that page so that page isn't opened perfectly.

DUDE JUST READ THE STUFF ABOVE AND STOP EXPOSING YOUR SESSION TOKENS.DELETE THAT IMAGE ASAP


Title: Re: Hidden Input Boxes on the Merit Page
Post by: theymos on April 10, 2018, 07:59:39 AM
http://i0.kym-cdn.com/entries/icons/original/000/000/554/picard-facepalm.jpg