Quote:
Originally posted by sweet7
That's fucked up. How's that happening though?
|
Same sort of thing as a members area. If you link hotten an image in someone's members area then you'll get a password prompt. The remote server will not return the content until it gets a valid password.
In this case the guy would be logging everything entered, and using the hostname he can guess the ISP and access their mail (or perhaps more if there is some sort of account management page). I'm sure he's picked up quite a few AOL accounts by now.