Various issues (wishlist, view permission)
Created by: Gabyfle
Like an H4X0R, I was able, thanks to my web browser, to modify certain links to access pages that I should not have been able to access.
*As in question on Corpus, I'm going to introduce you to my plan* First of all, we'll be talking about the wishlist, then about the permission to view some pages of forbidden scripts. *lel*
- Wishlist Issue This issue allows you to put any addon in your wish list. To reproduce this problem, do the following:
First, review the "wishlist" button with your code inspector on your favorite browser. Then, get the line where this redirect you to *addon_id*/wishlist
, and change the script ID with the one you want. Warning, the ID has to be an existing addon (whether or not it is accepted, but must exist).
Once you do this, simply click on the "wishlist" button, and the addon goes directly in your wishlist.
(Note that you can reproduce it faster by just going to : https://www.gmodstore.com/market/view/*addon_id*/wishlist
, but I wanted to show that it's within the reach of anyone who comes along)
- View permission Issue
I noticed that it is possible to buy, see the different versions and discuss on addons that have been refused / deleted, such as https://www.gmodstore.com/market/view/206/
"Proof":
That's all for today, thank you all, Gabyfle.
(PS: @ExtremLapin put me on the track with his wish list)