Xanga Weirdness???

TechBoyJK

Lifer
Oct 17, 2002
16,699
60
91
Originally posted by: DLeRium
I do not understand.. IT messed up my subscriptions page like mad.. I guess its some ghetto script someone wrote to screw Xanga up?

sounds like exodus owned you.
 

virtuamike

Diamond Member
Oct 13, 2000
7,845
13
81
Entries aren't erased, just pushed back. It's a self replicating javascript worm, exploits HTML GET hole for entries (seriously wtf, use POST yo).

Copy/paste from my xanga:

Since it's a javascript/IE exploit, first thing to do is disable javascript. That'll allow you to edit. The problem is that with javascript disabled you can't delete the entries. Enter firefox. Sign into xanga on firefox as yourself, copy the edit link for the offending entries from your IE browser (with javascript disabled), paste into firefox browser (with javascript enabled), and hit delete. Repeat until clean.

How to avoid? Either use firefox, disable javascript in IE, don't be logged in while reading sites, or wait until the xanga admins figure out how to disable the exploit and delete the entries *hint* HTML GETs suck *cough*.
 
Feb 19, 2001
20,155
23
81
Originally posted by: virtuamike
Entries aren't erased, just pushed back. It's a self replicating javascript worm, exploits HTML GET hole for entries (seriously wtf, use POST yo).

Copy/paste from my xanga:

Since it's a javascript/IE exploit, first thing to do is disable javascript. That'll allow you to edit. The problem is that with javascript disabled you can't delete the entries. Enter firefox. Sign into xanga on firefox as yourself, copy the edit link for the offending entries from your IE browser (with javascript disabled), paste into firefox browser (with javascript enabled), and hit delete. Repeat until clean.

How to avoid? Either use firefox, disable javascript in IE, don't be logged in while reading sites, or wait until the xanga admins figure out how to disable the exploit and delete the entries *hint* HTML GETs suck *cough*.


Thanks so much... I had IE and FF open and apparently I went to Xanga with IE instead of FF.. =/ Big mistake. bleh

But seroiusly, who uses friggn GET.. LMAO Lame. I've used GET only for debugging/easy to fvck around with my own scripts, but when it goes gold, its ALWAYS POST.