Grudge
Power Member
- Nov 2, 2018
- 675
- 530
As it is right now, the signature feature allows JR vips to host an image in their signature.
That's fine but the host can be whatever you want, not just image hosting websites (eg: imgur)
Which basically means that users can:
- Log ALL IPs that see their signature
- Change their image based on: Region, Hour, IP (show a different image to Mods and another one to normal users)
- Show a different image to people that have visited their links before (as they can log the IPs from their website and add it to the "Signature" image system)
I think the people on this forum can think of way worse (or better depending on your point of view) to exploit this system.
Fix: Only allow image hosting websites for the IMG feature
That's fine but the host can be whatever you want, not just image hosting websites (eg: imgur)
Which basically means that users can:
- Log ALL IPs that see their signature
- Change their image based on: Region, Hour, IP (show a different image to Mods and another one to normal users)
- Show a different image to people that have visited their links before (as they can log the IPs from their website and add it to the "Signature" image system)
I think the people on this forum can think of way worse (or better depending on your point of view) to exploit this system.
Fix: Only allow image hosting websites for the IMG feature