Let's play a game

[Ellie]

Here's the deal: I am working on a cool snazzy system for the next ORGy awards, but I need to know how secure it is.

See this board?

viewforum.php?f=204

I removed the password for now to test this out.

I have made a post in this board. It is just a normal post.

The contents of the post is "Bing Crosby"; the title of the thread is "Sneaky Snooper Found Me". You cannot view this post, but you have technical permissions to. You cannot search for this post (in theory - prove me wrong please). You cannot go to a profile and click "view user's posts"; even if you found the post you couldn't say who had made the post.

I need you to find a loophole in this to prove me wrong, just so I know it is secure.


Why?

I don't want people seeing who folks have nominated for awards of course!



So here's the deal: if you can successfully bypass my security measures and access the post, then I will change my usertitle to "I am *username*'s whore" and add it to my sig. Not much I know, but I don't have much to offer in way of prizes



I have intentionally left one loophole open for now, just to see if anyone gets it. (It will be sealed... muahaha etc.) But ideally I want you to find a new loophole.

IF YOU FIND IT, PM IT ME. DON'T POST IT HERE. <_<


Thanks,
- Evil Santa



P.S. One thing in the description of the post I gave is wrong - that's how I'll know if you successfully evaded your way in

 

[Ellie]

Mods, gmods and admins are banned from entering since you can see the topic anyway.

 

[Ellie]

Heh this is moot since I just worked out a fully secure method anyway; the contest still stands and the loopholes are still there for now.

 

[vgvgf]

Removed... I read the PM part of it...

 

[Ellie]

vgvgf wins!

In a way I hadn't thought of (but which has now been fixed)

Thanks guys but if anyone finds any more let me know.

And er... hmm, title.

 

[Ellie]

How he did it:

1. An error on my part (I didn't realise there was a seperate loop for post and thread searches, so he could just search and view as threads and see the link to the topic
2. Used "reply mode" to view a list of recent posts in that topic to view the original post

Both have now been fixed!

 

[vgvgf]

I'm happy for having helped, and if I find another hole, I'll keep it to myself, so I'll be able to see the topics

Nah, I'm curious but not that much, I'd report the hole.