Ads keep us online. Without them, we wouldn't exist. We don't have paywalls or sell mods - we never will. But every month we have large bills and running ads is our only way to cover them. Please consider unblocking us. Thank you from GameBanana <3

Website Should Implement Image Proxies

A Bug


Brief Information

Users can include images in their posts which log IP data and this information can be used for bad intent, one of which include:

  1. Using NMAP to scan for open ports which might be vulnerable
  2. Selling the data to illegal parties
  3. DDoSing the IP address thus kicking the router offline
  4. ..etc etc

Here I have included some screenshots of the problem:





Fix

A fix would be to implement image proxy just like Google or Facebook does.
Use the special URL to show the user the picture such as:
https://www.gamebanana.com/image.php?u=https://i.i...

So what would this do is the server gets the data from the picture and prints it out on the page which is www.gamebanana.com instead of some malicious URL.

Comments

Sign up to access this!
  • Danial Zahid avatar
    Danial Zahid username pic Joined 7y ago
    Baldi Manager GoldSrc Manager Moderator
    Online
    ?
    1,899 points Ranked 20894th
    60 medals 4 legendary 16 rare
    • Submitted 50 Gamefiles Medal icon
    • Submitted 15 Tools Medal icon
    • Submitted 60 Prefabs Medal icon
    • Returned 5000 times Medal icon
    • 50 posts awarded Exemplary Feedback Medal icon
    • Submitted 20 Gamefiles Medal icon
    Danial Zahid avatar
    Danial Zahid
    Bug Zapper
    access_time 3mo

    Marked as resolved, since as said, it's better suited as an Idea/suggestion.

    URL to post:
  • tom avatar
    tom username pic Joined 18y ago
    TBS2 Manager Super Admin
    Offline
    41,081 points Ranked 100th
    65 medals 12 legendary 10 rare
    • Achieved Super Admin clearance Medal icon
    • 10 years a member Medal icon
    • Thanked 500 submitters Medal icon
    • Submitted 200 Blogs Medal icon
    • Submitted 200 Threads Medal icon
    • Submitted 60 Polls Medal icon
    tom avatar
    tom
    test 1 2 3
    access_time 4mo
    As I understand it, GameBanana would then need to pay for the image bandwidth too.
    testing 1234 222
    URL to post:
  • urara avatar
    urara username pic Joined 10y ago
    Not here!
    24,128 points Ranked 210th
    33 medals 3 legendary 7 rare
    • Submitted 10 Apps Medal icon
    • Returned 5000 times Medal icon
    • 10 years a member Medal icon
    • 6 years a member Medal icon
    • Submitted 5 Apps Medal icon
    • Submitted 15 Tutorials Medal icon
    access_time 4mo
    Seems better suited submitted as an idea.
    • Correct x 1
    Bananite
    URL to post:

Embed

menu
Share banner
Image URL
HTML embed code
BB embed code
Markdown embed code

Reporter

theNurky avatar
theNurky Joined 3y ago
I am offline
1,066 points Ranked 24192nd
18 medals 2 rare
  • Submitted 20 Maps Medal icon
  • Returned 1000 times Medal icon
  • Submitted 5 Maps Medal icon
  • Returned 100 times Medal icon
  • One month a member Medal icon
  • Submitted 1 Tool Medal icon
theNurky
Sign up to access this!
Sign up to access this!
Sign up to access this!

Details

Resolution
Resolved
Priority
Low
Problem Source
https://www.gamebanana.com

Share

  • Share on Reddit
  • Share on Twitter
  • Share on Facebook
  • mode_comment 7
  • access_time 4mo
  • access_time 3mo

More from Submitter

menu
bcp.crwdcntrl.net tracking pixel