URL Trick and Too Much Time

I didn’t think anyone would bother, but someone cared enough to take the time to exploit the SnipSnap referral backlink list that is displayed under each snip. This was done by tweaking a link to this site to add extra markup to the request, creating a referral with additional markup in the URL. When that link was used to request a page from this site, the server read that referral and associated it to the snip to be displayed. “Hacker” tag included:

While the banklinks were interesting, I’ve taken them off until I have the new release in place to tweak a little more to prevent such silliness.

Never trust the user. :-)

Leave a Reply

Your email address will not be published.