Login Links Glitch

[Fluffy728]

You can create login links like: https://scratch-coding-hut.netlify.app/account.html?username=USERNAME but it also supports https://scratch-coding-hut.netlify.app/account.html?username=griffpatch

Can you please fix this security vundernilty?

[kRxZykRxZy]

You can create login links like: https://scratch-coding-hut.netlify.app/account.html?username=USERNAME but it also supports https://scratch-coding-hut.netlify.app/account.html?username=griffpatch

Can you please fix this security vundernilty?

I'm gonna fix it

[kRxZykRxZy]

Done, I haven't tested it cos I'm waiting for the server to get back up for APIAuth.

[Fluffy728]

not again, lookup CVE-2025-31122 on google

[Fluffy728]

still not fixed

[kRxZykRxZy]

Fixed! Now uses base64 Encoding/Decoding

Test if needed

[Fluffy728]

Another glitch - you can encode your username and enter It into the ?username=, so I reopened this issue.

[kRxZykRxZy]

Another glitch - you can encode your username and enter It into the ?username=, so I reopened this issue.

Ohhhhhh, I'll add key shifting