Hi,
I find a bug/vuln. in Thank plugin! Its not secure!
Plz check for updates(Patch).

http://www.talkphp.com/post_thanks.p..._thanks_add&u='

GL.

__________________
http://Yousha.Blog.ir/

Thanks for pointing this out. However, hmm, I get a "Content Encoding Error" error for that. How does this URL differ from the one on the "Say Thanks" button, apart from you've substituted the p parameter for u?

__________________
The man who comes back through the Door in the Wall will never be quite the same as the man who went out.

lol!
Iam not a hacker! But you know about hackers?
Do you think, Hackers uisng standard URL browsing??
This plugin is not secure(Patch needed) And this is a BUG!
GL.

__________________
http://Yousha.Blog.ir/

Please explain the actual vulnerability, what harm can be done?