ForenOpfer: the plugin doesn't set a cookie of its own, but it does indirectly rely on cookies, since the victim has to be logged in. I agree that IP-based selection would be useful too - I'll add this when I get a chance (maybe in a couple of days).
Snatta: before you get too worked up, don't forget that I wrote this in my spare time, and am making it available for free. I haven't been able to replicate the problem on any of my vbulletin installations, which is making it harder to fix
|