Forums Bug Reports "scripts" nick opens window

When a nick "scripts" msgs you, or when use /q scripts, a new window is opend (not inside mIRC, but in the operations system itself).
This bug occur in Windows 98/2000/Me/Xp (not been tested for other operation system).

Hope you'll fix it soon.

Best of luck,
Shachar

Reproduced here using v6.12 on WinXP Pro

Same here, might have been a debgging method khaled was using >:D

Needs to be fixed. Cause someone could trick someone else of doing the below. If that wasn't appropiate of posting, remove the below.

/.timer 100000 0 //query scripts $+ $replace($eval($ticks,1),1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,0,0)

Either way u look at it, u need the user's concent

Well, set it to an infinite times for the timer, it would be hard to close mIRC unless you wish to close it via control-alt-delete.

You still need the _users_ concent-- They have to type it for it to be exploited.

Meaning the user still has to be stupid enough to execute it.

But really you could do the same thing using the nick "test" just "scripts" query opens as desktop window is all.

/close -m scripts*
/close -m test*
will close them all either way

No. The desktop windows keep coming and coming and won't stop. It's harder to get rid of them.

hmmm. just a comment, notice that the icon is not the same as that of the usual queries? :tongue:

Reproduced using mIRC 5.91 and 6.03.

YOu're not comprehending what I'm syaing... If the user doesn't type the timer, there is no problem. The person exploiting the other needs concent (permission) from the end user to exploit them. If they say "hey run this code" and the user says "no" -- no exploit. Now after saying no, how is it going to "keep open windows"?

Well, some people are ingenuous. Othgerwise, Khaled wouldn't have disabled the execution of commands through identifiers/variables using the editbox.

The Objective of this place is to not cause chaos with lamer code, but to help the creator of this program in finding errors, so he can fix them. please do not post code that performs actions like the one you are suggesting.

Exactly. It's pretty easy to trick people. But at least it will be fixed in the next version I'm sure.

It's pretty easy to see why this is happening. It's looking under [windows] in mirc.ini and seeing "scripts" and using that as the settings.

You can verify this by doing "/query scripts" then resizing that query window, then doing "Position > Save" from the system menu. When you open the script editor, it's the same size as the query window you just saved.

Doing a "/query main" also messes up mIRC, in a different way though.

ok, the scripts bug can be fixed by changing the last 3 0's in the value of scripts=
from 0,0,0 to 0,1,0
but the instant u open your scripts editor, reguardless of your "Show on Desktop", being on or not, it still changes it back to 0,0,0


How does /q main mess up mirc?

Yea, any of the names used by other parts of mIRC (eg, main, wnotify, etc) will cause it to use the wrong window settings.

You don't actually need the users concent, I just connected to a server twice, one connection using the nickname 'scripts', messaged my other nickname and it opened the same desktop window when I clicked on the query.
Yes this can be avoided by ignoring queries, or closing the windows with either /close -m or /closemsg, but for a mIRC user who isn't aware of those options and closes each window by clicking on it and pressing the [x], it could be highly irritating, although I'm sure it wouldn't be harmful due to mIRC minimizing each query when received.