• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Xanga Weirdness???

Entries aren't erased, just pushed back. It's a self replicating javascript worm, exploits HTML GET hole for entries (seriously wtf, use POST yo).

Copy/paste from my xanga:

Since it's a javascript/IE exploit, first thing to do is disable javascript. That'll allow you to edit. The problem is that with javascript disabled you can't delete the entries. Enter firefox. Sign into xanga on firefox as yourself, copy the edit link for the offending entries from your IE browser (with javascript disabled), paste into firefox browser (with javascript enabled), and hit delete. Repeat until clean.

How to avoid? Either use firefox, disable javascript in IE, don't be logged in while reading sites, or wait until the xanga admins figure out how to disable the exploit and delete the entries *hint* HTML GETs suck *cough*.
 
Originally posted by: virtuamike
Entries aren't erased, just pushed back. It's a self replicating javascript worm, exploits HTML GET hole for entries (seriously wtf, use POST yo).

Copy/paste from my xanga:

Since it's a javascript/IE exploit, first thing to do is disable javascript. That'll allow you to edit. The problem is that with javascript disabled you can't delete the entries. Enter firefox. Sign into xanga on firefox as yourself, copy the edit link for the offending entries from your IE browser (with javascript disabled), paste into firefox browser (with javascript enabled), and hit delete. Repeat until clean.

How to avoid? Either use firefox, disable javascript in IE, don't be logged in while reading sites, or wait until the xanga admins figure out how to disable the exploit and delete the entries *hint* HTML GETs suck *cough*.


Thanks so much... I had IE and FF open and apparently I went to Xanga with IE instead of FF.. =/ Big mistake. bleh

But seroiusly, who uses friggn GET.. LMAO Lame. I've used GET only for debugging/easy to fvck around with my own scripts, but when it goes gold, its ALWAYS POST.
 
Back
Top