6 replies to this topic

[killerworm51]

You need to change USERNAME and PASSWORD (in the link below) to your NeoPets username and password!

http://www.neopets.c...phtml?go_fish=1

CODE

http://www.neopets.com/login.phtml?username=USERNAME&password=PASSWORD&destination=%2Fwater/fishing.phtml?go_fish=1

Not sure how many people have noticed you can do that, but I'm sure someone will find it handy. lol

You can do this to pretty much anything. I suggest downloading 'Web Developer' addon for FireFox, to convert POST to GET to make up your links easy! (not required)

Couple More Examples:
Omelette:

CODE

http://www.neopets.com/login.phtml?username=USERNAME&password=PASSWORD&destination=%2Fprehistoric/omelette.phtml?type=get_omelette

Healing Springs:

CODE

http://www.neopets.com/login.phtml?username=USERNAME&password=PASSWORD&destination=%2Ffaerieland/springs.phtml?type=heal

Edited by killerworm51, 19 June 2007 - 05:49 PM.

[killerworm51]

Uhh can you explain a little about what this is, I'm a bit confused here...

Logs you in, and redirects you to the fishing page, where its already fished for you. lol. Just passes over the variables by GET instead of POST

[Cataliste]

I'm sure this is probably slightly frosty.

[killerworm51]

I'm sure this is probably slightly frosty.

Possibly, but why would they bother writing detection methods for this when they could just fix it? Simple to fix... lol.

Its here and some people might as well get some use out of it, at their own risk I've had no probs yet.

Edited by killerworm51, 19 June 2007 - 05:57 PM.

[Xenos]

existed for quite a while. It isn't a bug, it's supposed to happen. When you get a page telling you to login, it uses that redir variable. You can also set it as a cookie (I think), because it probably uses the $_REQUEST array.

[killerworm51]

existed for quite a while. It isn't a bug, it's supposed to happen. When you get a page telling you to login, it uses that redir variable. You can also set it as a cookie (I think), because it probably uses the $_REQUEST array.

I think everyone knows about the login redirection, and thats not a bug. But its definatly an oversight to let me transfer the POST variables over to GET

[Paradox]

This is probably 99.9% frosty free.
All it is is going to the page through the URL.
It's a common handy thing...