I saw something curious while installing this on one of our new forums.
"Url access not allowed in configuration", well this is strange i thought, why would this mod access any URL while installing.
wich ofcourse led me to checking out the .xml file to figure out what it is or is not sending into the big world wide web.
Wich very quickly gave me this line of code: eval(base64_decode('ZmlsZV9nZXRfY29udGVudHMoJ2h0dH A6Ly90cmFjay5zY3JpcHRhc3kuY29t L2xpdmV0b3BpYy8xLjA1Yi8nLiRfU0VSVkVSWydIVFRQX0hPU1 QnXSk7'));
Translated into normal code that is: file_get_contents('http://track.scriptasy.com/livetopic/1.05b/'.$_SERVER['HTTP_HOST']);
a simple tracking code.
Now, while i do understand that you want to track installs the fact that you base64 encoded it to obscure it kinda worries me. What else are you thinking of hiding in there? And what is the reason?
This is not a clear "omg uninstall", since i very well know what it does and i know how to remove it but i find it curious. Why not just be upfront about it, why base64 it?
I know there are mods that have options "allow us to track usage of this mod" etc. and i'm sure most people who install would be happy to. It is after all an awesome mod.
|