Bitcoin Forum
May 10, 2024, 11:04:05 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Hidden Input Boxes on the Merit Page  (Read 259 times)
Joel_Jantsen (OP)
Legendary
*
Offline Offline

Activity: 1876
Merit: 1308

Get your game girl


View Profile
April 10, 2018, 07:25:59 AM
 #1

Not sure if anyone has noticed this before but I found something interesting while fiddling on the merit page.Two mysterious hidden inputs.


What are those ?
1715339045
Hero Member
*
Offline Offline

Posts: 1715339045

View Profile Personal Message (Offline)

Ignore
1715339045
Reply with quote  #2

1715339045
Report to moderator
1715339045
Hero Member
*
Offline Offline

Posts: 1715339045

View Profile Personal Message (Offline)

Ignore
1715339045
Reply with quote  #2

1715339045
Report to moderator
Once a transaction has 6 confirmations, it is extremely unlikely that an attacker without at least 50% of the network's computation power would be able to reverse it.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715339045
Hero Member
*
Offline Offline

Posts: 1715339045

View Profile Personal Message (Offline)

Ignore
1715339045
Reply with quote  #2

1715339045
Report to moderator
theymos
Administrator
Legendary
*
Offline Offline

Activity: 5194
Merit: 12982


View Profile
April 10, 2018, 07:46:29 AM
Merited by Joel_Jantsen (2)
 #2

The last one is your session key, which allows anyone to use your account. Congrats. (I logged you out, invalidating it...)

Hidden form fields are extremely common. You'll find them on virtually every form on the forum. They're hidden from view, not "secret".

1NXYoJ5xU91Jp83XfVMHwwTUyZFK64BoAD
Joel_Jantsen (OP)
Legendary
*
Offline Offline

Activity: 1876
Merit: 1308

Get your game girl


View Profile
April 10, 2018, 07:50:40 AM
 #3

The last one is your session key, which allows anyone to use your account. Congrats. (I logged you out, invalidating it...)
Oh I never knew that was my session token!Thanks a lot! I did get logged out.

Hidden form fields are extremely common. You'll find them on virtually every form on the forum. They're hidden from view, not "secret".
Yep! If I may ask,what is the other field adjacent to the merit input?
TMAN
Legendary
*
Offline Offline

Activity: 1414
Merit: 1808


Exchange Bitcoin quickly-https://blockchain.com.do


View Profile WWW
April 10, 2018, 07:51:19 AM
 #4

The last one is your session key, which allows anyone to use your account. Congrats. (I logged you out, invalidating it...)

Hidden form fields are extremely common. You'll find them on virtually every form on the forum. They're hidden from view, not "secret".
Theymos to the rescue as always!

███████████████████████████
███████████████████████████
████████▀▀▄▄▄▄▄▄▄▀▀████████
██████▀▄██▀▀▄▄ ████▄▀██████
█████ ███ ████ ▀▀████ █████
████ █████ ███▀▀▀▄████ ████
████ ███▀▀▀▄▄▄████████ ████
████ ██▄▄▀▀███████▀▄▄█ ████
█████ █████ █▀██▀▄███ █████
██████▄▀███▀▄█▀▄███▀▄██████
████████▄▄▀▀▀ ▀▀▀▄▄████████
██████████▀▄███████████████
██████████████████████████
.
.FORTUNEJACK   JOIN INVINCIBLE JACKMATE AND WIN......10 BTC........
█████████████████████████
█████████████████████████
██████▀▀▀       ▀▀▀██████
█████  ▄▄▄█████▄▄▄  █████
█████  █████ █████  █████
█████  ██▄     ▄██  █████
█████  ████   ████  █████
█████▄  ██▄▄█▄▄██  ▄█████
██████▄  ███████  ▄██████
███████▄   ▀▀▀   ▄███████
██████████▄▄ ▄▄██████████
█████████████████████████
█████████████████████████
.
..
theymos
Administrator
Legendary
*
Offline Offline

Activity: 5194
Merit: 12982


View Profile
April 10, 2018, 07:51:45 AM
 #5

Yep! If I may ask,what is the other field adjacent to the merit input?

Read the HTML and find its name.

1NXYoJ5xU91Jp83XfVMHwwTUyZFK64BoAD
Joel_Jantsen (OP)
Legendary
*
Offline Offline

Activity: 1876
Merit: 1308

Get your game girl


View Profile
April 10, 2018, 07:53:48 AM
 #6

Yep! If I may ask,what is the other field adjacent to the merit input?

Read the HTML and find its name.
Got it.msgID [message-id].Thank you!
Joel_Jantsen (OP)
Legendary
*
Offline Offline

Activity: 1876
Merit: 1308

Get your game girl


View Profile
April 10, 2018, 07:58:10 AM
 #7

tried to inspecting element in my case I use Chrome. may this is what @theymos means:

why those appear on yours:
1. you're using an unsupported browser (I don't what it's)
2. maybe you were on the slow connection while open that page so that page isn't opened perfectly.

DUDE JUST READ THE STUFF ABOVE AND STOP EXPOSING YOUR SESSION TOKENS.DELETE THAT IMAGE ASAP
theymos
Administrator
Legendary
*
Offline Offline

Activity: 5194
Merit: 12982


View Profile
April 10, 2018, 07:59:39 AM
Merited by Quickseller (1)
 #8


1NXYoJ5xU91Jp83XfVMHwwTUyZFK64BoAD
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!