SRL Archive - News and General

i used his smithing script and i got my account stolen, check my posts on page 4 of this thread.

http://www.srl-forums.com/forum/iroki-ak-smelter-t33279p4.html


and now read all the posts page 4-5. he is stealing passwords. we need to kik this guy out of srl.

It was brought up in the SRL section and the staff is taking care of it.

Ooooh. Meh. Too bad.. I hate people like that.

thanks you two.

There is one word for that:
Silly.

But you better don't tell them it was from a SRL script ;)

yeah we caught him yesterday, i posted at 2 am to not use. thanks to BobboHobbo we have got him

Link to SRL Members only discussion:
http://www.villavu.com/forum/showthread.php?t=33215

From: Hy71194
Link to SRL Members only discussion:
http://www.villavu.com/forum/showthread.php?t=33215

How is that going to help a "Junior" member hy? lol…

From: Narcle
How is that going to help a "Junior" member hy? lol…

Should it be moved to General section, or if an SRL member views this and they cbf to search for it ? :p

I think the script should of been deleted … the longer it is being shown the longer newbs can see how to steal passwords and make similar scripts that steal passwords too:mad:

From: Java Lava
I think the script should of been deleted … the longer it is being shown the longer newbs can see how to steal passwords and make similar scripts that steal passwords too:mad:

everyone can do that with knowledge of scar+html:p

-Tsn.

From: Java Lava
I think the script should of been deleted … the longer it is being shown the longer newbs can see how to steal passwords and make similar scripts that steal passwords too:mad:

You can only see the SCAR side, the php bit is invisible.

@Hy yeah members… but a junior made this thread so it really doesn't make much sense. :P

From: Java Lava
I think the script should of been deleted … the longer it is being shown the longer newbs can see how to steal passwords and make similar scripts that steal passwords too:mad:

I doubt that many newbs can manage making some php script to "send" the information to and hosting it.. But most likely they can find something similar if they really need to, and that is why you should ALWAYS check what the script is trying to connect to and what it's sending before allowing anything.

It's really quite easy finding the part where the script tries to connect to the internet. Just search for getpage's etc., look what url it's trying to connect to and see if it's trying to send some variables etc., then just search for them and see if the script puts some information in them you wouldn't like to give away..

GetPage, GetHTTPPage and PostHTTPPage are the key methods that you should search for. In the case of the latter 2, look for AddPostVariable for what they are sending out and always trace back to creation as they may try to confuse you by storing loads of different random crap in it before putting username and password into it.
Edit:
Account stealing can be made in PHP in 1 line (maybe 2 if you wanted it to be less complex).

SRL Staff is dealing with it.
Please let us handle the situation.

Closed.