Closed (won't fix)
Project:
Troll
Version:
5.x-2.x-dev
Component:
Code
Priority:
Normal
Category:
Support request
Assigned:
Unassigned
Reporter:
Created:
11 Mar 2010 at 04:08 UTC
Updated:
3 Feb 2013 at 20:05 UTC
Jump to comment: Most recent
Comments
Comment #1
Anonymous (not verified) commentedThere isn't a way to do this currently, but it could certainly be done. In fact, I'd recommend that one be EXTREMELY careful with this. If, for example, you ran "http://example.com", you might be tempted to have a URL like "http://example.com/troll/insta-block" that would instantly block the user's IP. That could easily work. Maybe you would do it so that spam bots couldn't play with your site. Here's the problem though: what happens if we have a malicious user? If they want to block "Bob" from the site, they could send him an HTML email with
in it. This would cause Bob's computer to make a request to that URL even though he didn't realize he was being setup. This would effectively provide a way for an malicious user to block anyone (including you) from the site.
Comment #2
pomliane commentedThis version of Troll is not supported anymore. The issue is closed for this reason.
Please upgrade to a supported version and feel free to reopen the issue on the new version if applicable.
This issue has been automagically closed by a script.