Raven's password system sucks more than she does
The full story here-
Raven's member's area is 'protected' by a security system called SPARTA. The long and the short of it is that the system totally blows. Until a few weeks ago, you could simply share member's area links, and sessions would be inherited and duplicated.. so if someone had a good link, they could spread it to all their friends, and they'd all be logged in. We had a great thing going for a few months on just the one login...
That said, the SPARTA thingo appears to authenticate off a mysql database. It's running off PHP, so naturally it's full of holes, and their scripts run unescaped sql, so with a few neat injections, we can pull daily password dumps from the database.
These passwords work on Raven Riley's site, and should work as they're grabbed daily. |