Forums Bug Reports Social Engineering Exploit (Severity: Low)

The charactor is not interpreted by the server, it never reaches the server.

In an example such as //say test $+ $chr(10) $+ test. It is evaluated before being sent. So in this example if you do not have a 'test' alias you will recieve an 'test Unknown command' error. the reason quit works is because there is an internal /quit alias.

To be honest, i dont particularly see how this is much of a risk, if your silly enough to copy/paste a command when you dont know what it does then theres a lesson learnt. (the very same lesson learnt if you paste //say test | quit test). I dont really see it is any risk in premade scripts either, because shoving a line like "//say bla $+ $chr(10) $+ quit bla" in the script is really no different than putting it on two seperate lines fex:
"//say bla"
"quit bla"

Using chr 10 like that is no different than using chr 124 (pipe). As for all intensive purposes they seem to be treated pretty much the same by mirc.