By UwUQueen
09 Mar 2025 02:46
Category: Bug Report

How does this work?

On an unverified account, goto my https://3dspaint.com/my/settings.php

Than recreate this form. You can use javascript:document.write(); in the browser address bar or in developer tools to do this.

<form action="" method="post"><input type="hidden" value="THROWAWAY_ACCOUNT_USERNAME" name="username" /> <input type="hidden" value="" name="first_name" /><input type="hidden" value="" name="signature" /><input type="hidden" value="+0" name="timezone" /><input type="hidden" value="" name="birthday" /><input type="hidden" name="mood" value="" /><input type="hidden" name="biography" value="Whatever bio you want here." /><textarea name="styling"></textarea><input type="submit" name="b_submit_profile" value="Save" /></form>

How to fix this issue?
When a form is submitted, on the server side, check that it is not submitting: signature, mood, timezone, biography or styling.

Resolved: Yes
Bug Report Low 1 hr

By @HullBreach
09 Mar 2025 23:06

fixed and deployed

@UwUQueen marked this request as resolved.
09 Mar 2025 23:58

@UwUQueen reopened this request.
09 Mar 2025 23:58

@HullBreach marked this request as resolved.
09 Mar 2025 23:06

@HullBreach left a reply.
09 Mar 2025 23:06

@HullBreach claimed ownership of this request.
09 Mar 2025 22:39

@HullBreach changed the priority from Highest.
09 Mar 2025 22:39

@HullBreach changed the hour estimate from 0.
09 Mar 2025 22:39

@UwUQueen changed the priority from High.
09 Mar 2025 02:46

@UwUQueen set the priority.
09 Mar 2025 02:46

@UwUQueen created this request.
09 Mar 2025 02:46