minibb®
A place to try it out
in a different mode
.org
Paint It Yourself
Test Skins
 · Reply · Forums · Polls · Register · Search · Statistics · Manual ·
Anything Else miniBB Demo / Anything Else /   

profanity filter just got bypassed.

qwerty

Admin 

#1 · Posted: 22 Apr 2013 07:21 
This bit of hacking brought to you by 3vilp4wn. I just added a U+202e then typed .tihs siht kcuf. A way to avoid this would be disabling unicode in the core minibb, as it should not be allowed anyways.
If anyone official wants to contact me about this, my email is ENH [AT] lavabit [DOT] com.
**** this ****
‮.tihs siht kcuf
The King of Admins

qwerty

Admin 

#2 · Posted: 22 Apr 2013 07:27 
Here's more on how I did it
The King of Admins

tester

Test Account 

Photos: 2 
#3 · Posted: 18 May 2013 18:14 · Edited by: tester 
It was possible if you typed & # 8238 ; with no spaces, so called "Right-To-Left Override" symbol.
It also bugs Google search If you try to put it in the search field, it will reverse the whole phrase.

It is fixed now...

3vilp4wn
Guest 

#4 · Posted: 22 May 2013 03:14 · Edited by: Admin 
if this renders properly, then you are correct.

qwerty

Admin 

#5 · Posted: 22 May 2013 03:16 
if this renders correctly, then you are correct
The King of Admins

qwerty

Admin 

#6 · Posted: 1 May 2014 21:40 
U+202e .tihs siht kcuf.
The King of Admins

Anything Else miniBB Demo / Anything Else / profanity filter just got bypassed. ↑ Top

Your Reply Click this icon to move up to the quoted message

 


You are welcome to post anonymously, by entering a nickname with no password (if the similar Username has not been taken yet), or by leaving both fields empty. If you have a forums account, you can also sign in from this page without posting a message, or sign in and post at once.
 
Online now: Guests - 1
Members - 0
Most users ever online: 522 [12 Sep 2015 15:43]
Guests - 522 / Members - 0
  miniBB Demo Powered by Bulletin Board Software miniBB ®