[Brugada]

(2010.Sep.29 08:22 PM)emocakes Wrote:  Tommi, im pretty positive that you dont even know what an exploit is. When you are a web developer, and have developer tools installed in your browser (i.e: firebug) exploits do find you.

Heres a simple example. When you attack someone, you have an option to select hospitalise, berzerk, leave, mug. Look at the html code and you will see that each of those options has a value, be it a number or a string. when you click attack, it submits the form, along with those values. generally you can only use values that the server provided you when you clicked the attack page. now if you just submit the form with your own values, that is "exploiting" (provided the form handling code doesnt have safeguards for that, which it didnt before i notified zen, not zens fault, it was err who coded the faulty pages).

Im not sitting here writing little command line apps to SQL inject extra money into my bank account.

Cheating, white liar.