[Orpheus]

There is a username exploit where you can get any username url 

lemme explain it 

https://bf.st/User-(username) so my username is (@/Orpheus)
if someone registered the username (@xx_) they would get the url https://bf.st/User-xx
which 2 letter usernames aren't allowed because the site minimum is 3 characters or more so now lets say someone registers with the username (@ Orpheus_) they would get the url
https://bf.st/User-Orpheus which is mine so you could basically impersonate anyone on this site but i dont think people are actually dumb enough to not see the underscore in the username
cya.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Scamming | https://breached.hn/Forum-Ban-Appeals if you feel this is incorrect.

[kilob]

Are you perhaps suggesting to only allow alphanumeric characters for usernames? Doesn't sound like a terrible idea to me, extremely easy to implement too. @ShinyHunters

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Extreme degenerate behavior | Unwelcome here

[Orpheus]

Are you perhaps suggesting to only allow alphanumeric characters for usernames? Doesn't sound like a terrible idea to me, extremely easy to implement too. @ShinyHunters

i guess so because i dont want retards crying that they lost money from a exploit

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Scamming | https://breached.hn/Forum-Ban-Appeals if you feel this is incorrect.

[KaBob]

Now watch what happens when two users name themselves 000 and 0000 or 0__ and 00_

[kilob]

Are you perhaps suggesting to only allow alphanumeric characters for usernames? Doesn't sound like a terrible idea to me, extremely easy to implement too. @ShinyHunters

i guess so because i dont want retards crying that they lost money from a exploit

It's always fun to see retards cry though.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Extreme degenerate behavior | Unwelcome here

[Orpheus]

Now watch what happens when two users name themselves 000 and 0000 or 0__ and 00_

(@/0__) 
(@/__0)
 both of these usernames would be the url https://bf.st/User-0 and you wouldnt be able to find one of them unless you find the uid

---

Are you perhaps suggesting to only allow alphanumeric characters for usernames? Doesn't sound like a terrible idea to me, extremely easy to implement too. @ShinyHunters

i guess so because i dont want retards crying that they lost money from a exploit

It's always fun to see retards cry though.

true

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Scamming | https://breached.hn/Forum-Ban-Appeals if you feel this is incorrect.

[Max]

I tried, this doesn't work.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Drama