Markyctrigger uses this image onerror linker until now. He uses it to call the xml request. I was trying to study their codes. Lol. Im really having difficulty on reading regexp

wew.. Master Feruzz..if you want to look for the holes in fs,you can try this [url]http://friendster.proxyserverhub.com/[/url]

wew.. OMG.. They close the link [url]http://friendster.proxyserverhub.com/[/url]

Last edited by TA Juleigtin Siahaan (2008-05-27 06:47:41)

^ wew that's include my todo's

I discovered that Friendster comment box can read dec/char coded texts.

^ Suberashii Yes Your Highness. I will keep this secret until Bill Gates back to work in Microsoft again. Thanks for sharing.

Last edited by deathwish4MCR-freak-dude (2008-06-03 03:17:09)

[b]@feruzz[/b] Congratulations. You win £1,000,000 and a trip to UK this summer. Joke. Lol. Thanks feruzz. I never thought of this mate. Cheers [spoiler]So those people who have auto comment box in their profile can be easily XSSed?? [/spoiler]

Whoa. But you already updated the New Testi Box. Nice stripXSS Function.

try this linker <">works in IE6, IE7, Firefox 2 & 3, Opera 9, Safari 3.0, Avant etc... I encountered that [b]document.body[/b] doesnt work in KHTML browsers like safari so I've decided to replace with [quote][b]document.getElementsByTagName('body')[0][/b][/quote] if you encountered an "Operation Aborted" in IE just ignored them because IE team still have no idea on how to solve the Memory Leak issue over a decade in their browser

Last edited by feruzz (2008-06-03 17:11:08)

just wondering, how about if the comment that containing the linker not in the first page anymore? i mean, everyday we approving new comments. so, that linker will not appear in the first page anymore right?