12test (IRC colors in post notifications or how to be banned)

[Yuki]

Actually, the exploit I am talking about was basically this: The post notification was sent by running a PHP file with URL parameters. Anyone who knew the URL and required arguments could send any text from the post notifier at will by opening the file URL in their browser. That was somewhere in 2011, hence why I was a bit against making CW bot a PHP script at first. But as an admin, it was fun while it lasted .

Technically that's what the bot does, but it only accepts connections from localhost. I sometimes make it say the game.

Yeah, basically the exploit is there, the bot itself does not check who sent stuff to it, but it only accepts connections from localhost. So, basically, you'd need to be either have access to the server or abuse another exploit that would probably result in a CVE number being assigned to it.