Bugtraq mailing list archives

Re: phpBB2 Showing users ip adresses


From: <nick84 () rootsecure net>
Date: 12 Oct 2002 22:04:45 -0000

In-Reply-To: <20021009125218.7737.qmail () mail securityfocus com>

If anyone wanted to get board readers/posters IP addresses on any phpBB 
(and most other bulletin boards), another easy way would be to simply set 
up your profile with an off-site avatar.  I.e. in the “Link to off-site 
Avatar:” box on the profile page, type in the URL to a server where you 
able to read the log files.  Then post a message, which will get read, 
and then note the time of any replies, correlating them to the time you 
got a hit on your avatar.

(This could also be done by inserting images/using html iframes etc)


______________________________
Nicholas Skinner
http://www.rootsecure.net/


Current thread: