ackvonhuelioLvl 41
[WUT] Adam
what about the bad idea
[WUT] Adam
what about the bad idea
well boys, it was fun while it lasted
DragonFireGames
nuh uh
ackvonhuelio guess i gotta go to khan now
[WUT] Adam Didn't you figure it out once and then proceed to spam the public project list so bad you were called to the office at school to talk about it.
DragonFireGames No, that was figuring out how to report projects programmatically and then doing so on every public project on the site.
I win :D
[WUT] Adam Yep, that's exactly what I was thinking. If publish requests can be hacked then the frozen
property should be changeable as well. And if you can edit a featured project, that means chats are actually still possible. Crazy thing is that I had been using the API a few days ago and noticed the new frozen
property, but didn't think anything of it.
ackvonhuelio Owokoyo explained that thumbnails can be hacked (part 4), but you need an authorization token first. Once that's figured out, both the thumbnail and frozen
property should be changeable.
Binary_Coder It's also possible to just use another project's thumbnail as the thumbnail, and then setting the channel ID in thumbnailUrl
to that project. Here's the easiest way to accomplish that:
thumbnailURL
to the channel ID of the thumbnail project, and then POST it to the server.The "authorization" is really just being logged into the code.org account that owns the project.
[WUT] Adam Okay, that's good to know. Never had much success with POST requests before but I'll give it another shot.
Also, does this mean that you could change the data in https://studio.code.org/api/v1/users/current to give yourself permission to add featured projects?
Binary_Coder Attempting to send a POST request to https://studio.code.org/api/v1/users/current returns 404. I couldn't figure out what makes a featured project featured--it's probably just an array on their end.
CDO fucked up so bad bro.. yeah im taking acks word for it and moving to ka