Forum

ReeliChat+ Major Bug Fixed: Admin Panel
Poster
Body
Level:
3
3
Posts:
463
463
Posted 5 years ago
A bug that allowed users with verified email to go to the SQL Injection page and ban anyone they pleased.
Pictures;

Tollonis banning multiple people:
https://media.discordapp.net/attachments/743662972978855966/754051274533765241/hb.PNG?width=1273&height=609

Picture of person messing with colors:
https://media.discordapp.net/attachments/743662972978855966/754052674646966393/grwvb.PNG?width=1440&height=513
Poster
Body
Level:
6
6
Posts:
2,538
2,538
Posted 5 years ago
interesting!
Poster
Body
Level:
7
7
Posts:
6,221
6,221
Posted 5 years ago
Hmm
Poster
Body
Level:
7
7
Posts:
8,950
8,950
Posted 5 years ago
very
Poster
Body
Level:
5
5
Posts:
2,171
2,171
Posted 5 years ago
mmm yes, where is this ReeliChat+
Poster
Body
Level:
4
4
Posts:
941
941
Posted 5 years ago
This has so many flaws.

SQLi wouldn't be logged. Secondly, I don't get how a SQL statement can mutate the CSS on a web page. Lastly, that admin panel is literally copied from a Bulma template. (Not our admin panel for those who still believe that lie.)
Poster
Body
Level:
1
1
Posts:
85
85
Posted 5 years ago
broski i trust please with my life and my minecraft account
Poster
Body
Level:
4
4
Posts:
1,156
1,156
Posted 5 years ago
...What is ReeliChat+?
Poster
Body
Level:
1
1
Posts:
85
85
Posted 5 years ago
an epic site that does NOT install any malicious software it just requires your ReeliChat account password the email linked to your ReeliChat accounts password with the email address and your ip just in case totally trust worthy
Poster
Body
Level:
4
4
Posts:
1,576
1,576
Posted 5 years ago
This is obviously the Bulma Admin Panel template. That's not what the admin panel for ReeliChat looks like.