Lirae.co.uk

I actually got up off my arse for once and updated the site.

• A new brush set - Sun Burst
• Display Last.fm Scrobbles on your site - script & tutorial
• Install MagpieRSS - tutorial
• Stylesheet Switcher - tutorial
• ClearDownloadsCounter is back up (very minor updates to it as well)
• RightNow is back up
• LittleWallO'Buttons is back up

LWOB got quite a big update.
In June 2007, LWOB had a security scare, where it would have been possible for someone to exploit your user accounts, using a hole in the script. Unfortunately, the problem wasn't limited to my script; most button / image linking scripts (including topsite scripts and ad rotations) could also be a risk. It's up to you to use the scripts but you really must know what you could be letting yourself in for. The type of attack is called a CSRF attack^{^}.

The good news is that I've removed the part of the script which automatically shows the user's chosen image. Instead, they give you the URL to their page full of link buttons to choose and you choose one. You can also upload the button/s within the script, as you're approving the request.

The upload script checks that the file type is an accepted type (jpg or gif - NO pngs!) and is less than 350kb. It also checks that the image is a valid image. If any or all of these are untrue, the image is deleted from the server.

Anyway, if anyone finds any errors, please let me know. My email address is mail @ lirae.net - I should be back online on Wednesday (although it'll be brief).