I found an exploit

[Termd] awsomeguy9906
Joined 05/07/2019
Posts 1,046
12:54 AM 17/11/2020
If you take somehow get the value of someones brick_hill_session, you can hack the persons account. Warn the players about cookie logging

Video: https://streamable.com/jszdcf


[Bings] Rexy.
Joined 19/06/2019
Posts 6,014
12:55 AM 17/11/2020
i
n
b
4


[furry] sonic5a
Joined 27/03/2018
Posts 6,697
12:56 AM 17/11/2020
inb4 ban


SmartLion
Joined 16/04/2017
Posts 1,970
05:44 AM 17/11/2020
Use this and do not publicly share potential exploits in the future
https://gitlab.com/brickhill/open-source/bug-tracker
Good chance that your exploit will be marked as "not a bug"
Users should know not to share their session cookies with anyone

1