2011-12-04, 03:13 PM
Hey guys,
I run a game server, so keeping things such as IPs away from people is essential, so no DDoSing goes around concerning the ingame players.
Recently, people have been PMing other members PHP scripts embedded in IMG tags that grab their IP. It looks like this basically:
Obviously the image shows up as a broken image, but the user doesnt have to open the link in order for their IP to be grabbed by the script, all they have to do is load the PM.
It seems the IMG tags will automatically load anything embedded in between them, or at least try to load. As a result, the PHP script tries to load, and it logs the person who opened the PM's IP.
I want to disable IMG tags in PMs as a result, is there a way? Thanks.
I run a game server, so keeping things such as IPs away from people is essential, so no DDoSing goes around concerning the ingame players.
Recently, people have been PMing other members PHP scripts embedded in IMG tags that grab their IP. It looks like this basically:
[img]http://www.google.com/script.php[/img]Obviously the image shows up as a broken image, but the user doesnt have to open the link in order for their IP to be grabbed by the script, all they have to do is load the PM.
It seems the IMG tags will automatically load anything embedded in between them, or at least try to load. As a result, the PHP script tries to load, and it logs the person who opened the PM's IP.
I want to disable IMG tags in PMs as a result, is there a way? Thanks.