emgram769/livechan-js

Bug, anyone can see admin ID's

Closed this issue · 1 comments

Anyone can type /admin and see the admin console and the ID's of every poster.

That's not a bug. You can see those IDs anyway in devtools, in websocket or via js console etc. It's just hashes they don't tell much. If they were not available to user /ignore function wouldn't work and (you)'s