[Rant] Forum safety in general.

[Corile]

Please make an old UBB-Hack providing guy happy and make this threat invisible.
Thanks.

There's no reason to. If we were discussing this subject while the exploit wasn't fixed then it might be a security problem but as it stands, it's fixed.

No, absolutely not; that's the "nonexistent input sanitizing" case I mentioned earlier. \[hr=([a-z\-]+|#?[0-9a-fA-F]{6}|#?[0-9a-fA-F]{3})\] was the one used for [hr=<colour>] as far as I know - it was the last version I saw, and the user-facing behaviour of [hr=<colour>] seemed to be consistent with that regex - so I'm not sure what happened in the transition from [hr=<colour>] to [hrc]. Again: Odd, it almost looks like two different people implemented them independently.

Well, the one I asked Alley to replace the faulty one with isn't as long and complicated, maintains the functionality that it had previously (using the standard css colour names as well as the three character shorthands) and should also be relatively idiotproof. My guess is that the person who implemented this just looked at [indent] or something similar and didn't know how the regex works.

---

Reflections on the Revolution in Gallia
Custodi // High City of Heraklion // The Cult of Archangels
Log Filter // Post Creator // Manhattan