quote:
Originally posted by KeyStorm
I finally can add Flashes to my sig
not in the sig
only in attachments
quote:
Originally posted by WDZ
I didn't think Windows would allow such characters in file names
windows not, but linux yes. I was testing in my own mybb instalation and I could upload a file with "<script>" in its name. Then the page couldn't be veiwed from that point
quote:
Originally posted by CookieRevised
you actually used < and > ?
yes, i did.
just create a file in linux, something like
echo hello > normal\<b\>bold\<font\ size=\'7\'\>size.txt
and upload it ...
quote:
Originally posted by KeyStorm
dangerous security bug...
of course....
Anyway, I see that's fixed now
/ 
