login page

C

cₗₒᵤd

Member
hi so i was not able to enter my username in input field of login because the max char is set to 50, soo i had to modify the payload directly into HT TP request body.

i'd suggest you to either remove longer names in the chat or update the login field payload to 100 characters.

ts lwk pmo btw. i'd say fire the devs smh.
 
Last edited:
cₗₒᵤd said:
lmaoo it's funny how things are hardcoded and are not variables 💔
Click to expand...
Actually most things are variables.

If you are on computer {which would make this easier} if you press and hold somebody's profile picture and click open in new tab you will see their user ID number as well as some other information. Everyone has a customized user ID number starting from one being the owner.

Basically tells you which account was made before when and if you look for user rank within devtools you'll be able to understand what rank equals what number and what permissions each rank most likely has.

{And before the admins come after me this is publicly available information because we all know if I want to reveal the source code I would have to stop being lazy first}
 
TJTheBear said:
Actually most things are variables.

If you are on computer {which would make this easier} if you press and hold somebody's profile picture and click open in new tab you will see their user ID number as well as some other information. Everyone has a customized user ID number starting from one being the owner.

Basically tells you which account was made before when and if you look for user rank within devtools you'll be able to understand what rank equals what number and what permissions each rank most likely has.

{And before the admins come after me this is publicly available information because we all know if I want to reveal the source code I would have to stop being lazy first}
Click to expand...
You would be surprised but sessions keys are publically available too 🤔 that's how people get hacked
 
TJTheBear said:
Well not with the new 11.0 update.

It added a second line of defense against it
Click to expand...
Ohh that's better, i was lwk curious like who even codes like that 🥀 also they use my SQL who even uses that anymore while using PHP, last time I checked they saved session keys in local storage but it should be stored in ****. Frontend kinda looks like vibe coded. But i believe backend of teenchat should be nicely written.

No wonder why it got hacked this month 🥀 also I've seen other chatsites using same codycha t templates but they use better security systems and least bugs and then teen-chat.org ahem. Even the gif system is highly vulnerable,they just used add-on but dunno how to optimise 🥀
 
cₗₒᵤd said:
Ohh that's better, i was lwk curious like who even codes like that 🥀 also they use my SQL who even uses that anymore while using PHP, last time I checked they saved session keys in local storage but it should be stored in ****. Frontend kinda looks like vibe coded. But i believe backend of teenchat should be nicely written.

No wonder why it got hacked this month 🥀 also I've seen other chatsites using same codycha t templates but they use better security systems and least bugs and then teen-chat.org ahem. Even the gif system is highly vulnerable,they just used add-on but dunno how to optimise 🥀
Click to expand...
Trust me I've custom coded shit to make sure the sites that I am a developer for are not as hackable as normal.

Also using SQL with PHP is smart idea essentially when 10.1 was using {Not about to be four banned again} but with 11.0 using Json and other things for a faster request time it talks right to the database instead of needing functions.

{This is an extremely bad explanation on purpose because I'm not trying to get banned from the forums again}
 
You must log in or register to reply here.
Top