Security hole in attachment downloads for points.
 

Personally I tend to copy and paste links from the attachment manager into the text editor to link attachment downloads and i've come across the following issue.

Links in the attachment manager after upload are structured like the example below.

An equivalent link without stc=1 will substract the points or show the purchase attachment template.

If you use the links with STC=1, they will be available for free...anybody who knows this can download anything for free, no matter the amount of points needed.

I believe the issue can be easily fixed, but I'm not a php expert.
If i'm not mistaken the file to be fixed is plugins/vbplaza_attachment_start.php.

I have a shop built around vbplaza and would love to have this fixed since we are about to launch in a few days.

Ooops, that's not good.

nope, it ain't :P

I fail to see how this is a "security" hole?

If we're splitting hairs, would you prefer the term exploit?

Security hole: In computer software, a security vulnerability is a software bug that can be used deliberately to violate security.

Exploit sounds better :D

Lets discuss why BSD is better than Linux now too! kekekekeke :banana:

Exploit then...sorry that i didn't use the correct terminology. none the less, it is a hole in the bit of code that checks if an attachment should be paid for :P. Call it exploit, hole, security exploit or security hole for my part. It's one thing for certain...it's annoying as hell...or heaven, depending on your 'religious' preferences.

amen :banana:

So, has anybody recoded this to use a POST instead of a GET? This is a simple fix from 1st look....