1vs1 - daelmun OWNS paradisel0st - q2dm1

[daelmun]

Hehe, just had to put this one up cause I was smiling the whole game through. Noone catches nades like paradise! Amazing. Anyway just one among hunderds duels between friends, nothing more to it than some fairly entertaining actions in the first half at least. Started to laugh too much near the end, but still 

Be warned about some packetloss throughout the demo, but should be watchable. DaHanG, you need to watch it ;P

[ni-ux]

[[BTF] Reflex]

Google bots sure know how to pick em.  Wonder if they have demoplay?

[|iR|Focalor]

A google bot is responsible for all the weird necro-threads being stickied as of late?

[console]

A google bot is responsible for all the weird necro-threads being stickied as of late?

Yup, that and a forum bug.  More info: http://tastyspleen.net/quake/forums/index.php?topic=14959.msg152471#msg152471

[Sgt. Dick]

I blame Cheeta 

[|iR|Focalor]

Bots are making administrative changes to the boards... well shit the bed.

It's not enough that we have to be paranoid about bots in-game, now they've leaked into the forums too.

I can't wait fer the rapture when Jayzus finally casts all the bots into the lake of fire forever and ever and ever. Hallelujah.

[reaper]

The bots shouldn't have moderator access 

 

Maybe the software doesn't have to be upgraded.  How is the bot using a PHPsessionID/cookie that can make administrative changes?

Since the forms based login (when you put in your username and password) puts the password in the body of an HTTP POST, it may not be a bad idea to get SSL (https), so the password isn't sent in clear text when you click login.  But even without logging in, if someone had the sessionID of a moderator they could sticky the posts.

Maybe the sessionIDs with moderator logins can be masked somehow so the bot won't be able to mess with posts, because changing the application is probably enough work where it equals upgrading the forum boards. ( I think maybe somewhere the sessionID is being revealed in a querystrings to the bot - maybe that is a quick removal).