Quote:
Originally posted by FireFly
In *theory* this can be done.
Basically, you need to enable avatar uploads of .swf files.
Then, add something that will determine whether the avatar is .swf or a regular images, and then use the right code.
Like I said, this in in theory.
(and I'm way too busy right now to do this, sorry)
|
why chen?
with flash enabled i could hack a board easy, all i have to do is insert some malicious java script into it to grab the cookie.
and you know this also.