[slscripters] llHTTPrequest object oddity or permission exploit?

8 views
Skip to first unread message

Markus Hastreiter

unread,
Oct 27, 2011, 10:19:49 AM10/27/11
to secondlifescripters
Is it possible at all that the objectname header transmitted in llHTTPrequests comes out garbled, the way the owner name sometimes is (loading...)?

In the past month I've seen something strange in my server logs, which is either a customer of one of my retail products renaming a no-mod no-trans object and llHTTPRequest reporting the name correctly, or something else "garbling" the product name. Though the "garbling" always seems to involved stripping the brand name and version from the product name.
This oddity happens with only a single person (out of 120) and I've only ever seen this with this one customer, on this one product. Before I confront the guy I want to be sure it's not some bug in llHTTPrequest, even though I've never seen that one before.

I'd appreciate advice on both the possibility that it may be an llHTTPrequest bug, as well as whatever he may be doing to rename the no-mod objects (renaming seems to involve a script reset every time he does it - I was under the impression scripts wouldn't be copied if he used copybot, so how would he get the script into the renamed object).

Thanks in advance
Markus

Dale Innis

unread,
Oct 27, 2011, 10:25:03 AM10/27/11
to Markus Hastreiter, secondlifescripters
You say it's no-mod no-trans, but... is it also no-copy? If not, he
may just be copying the script into an object of his own? I'm not
sure offhand if that should be possible. :)

On Thu, Oct 27, 2011 at 10:19 AM, Markus Hastreiter
<mar...@danardlabs.com> wrote:
> Is it possible at all that the objectname header transmitted in
> llHTTPrequests comes out garbled, the way the owner name sometimes is
> (loading...)?
>
> In the past month I've seen something strange in my server logs, which is
> either a customer of one of my retail products renaming a no-mod no-trans
> object and llHTTPRequest reporting the name correctly, or something else
> "garbling" the product name.

_______________________________________________
Click here to unsubscribe or manage your list subscription:
https://lists.secondlife.com/cgi-bin/mailman/listinfo/secondlifescripters

Markus Hastreiter

unread,
Oct 27, 2011, 10:41:34 AM10/27/11
to Dale Innis, secondlifescripters
I hadn't thought of that. Thanks for the tip!
Reply all
Reply to author
Forward
0 new messages