{"id":169,"date":"2005-05-16T10:24:00","date_gmt":"2005-05-16T17:24:00","guid":{"rendered":"http:\/\/antone.geckotribe.com\/alpha-gecko\/2005\/05\/16\/blogger-unbusted-comments-are-safe\/"},"modified":"2006-03-24T18:38:11","modified_gmt":"2006-03-25T01:38:11","slug":"blogger-unbusted-comments-are-safe","status":"publish","type":"post","link":"https:\/\/zeta.geckotribe.com\/alpha-gecko\/blogger-unbusted-comments-are-safe\/","title":{"rendered":"Blogger Unbusted! Comments are safe."},"content":{"rendered":"<p>I don't know how long it's been since they fixed this, but I check again this morning and discovered that enabling comments on Blogger-generated blogs that publish to PHP, ASP, SHTML, etc. powered sites is now safe! Back at the end of March, I posted <a href=\"http:\/\/antone.geckotribe.com\/bustedworld\/2005\/03\/bugtraq-is-busted-and-so-is-blogger.php\">a message on Bugtraq<\/a> outlining a vulnerability that I'd reported to Blogger twice before with no results. After posting to Bugtraq, I got a response from Blogger, and sometime in the last month and a half, finally action! Now, if you try to post PHP, ASP or other server-processed code in a comment, Blogger refuses to publish the comment. Good solution guys!<\/p>\n<p>Comments are now enabled here, and will be enabled on the rst of my blogs as I get the time to republish them. Yeah!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I don't know how long it's been since they fixed this, but I check again this morning and discovered that enabling comments on Blogger-generated blogs that publish to PHP, ASP, SHTML, etc. powered sites is now safe! Back at the end of March, I posted a message on Bugtraq outlining a vulnerability that I'd reported...<br \/>[<a class=\"moretag\" href=\"https:\/\/zeta.geckotribe.com\/alpha-gecko\/blogger-unbusted-comments-are-safe\/\">read more<\/a>]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20,33],"tags":[],"class_list":["post-169","post","type-post","status-publish","format-standard","hentry","category-internet","category-issuesproblems"],"_links":{"self":[{"href":"https:\/\/zeta.geckotribe.com\/alpha-gecko\/wp-json\/wp\/v2\/posts\/169","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zeta.geckotribe.com\/alpha-gecko\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zeta.geckotribe.com\/alpha-gecko\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zeta.geckotribe.com\/alpha-gecko\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zeta.geckotribe.com\/alpha-gecko\/wp-json\/wp\/v2\/comments?post=169"}],"version-history":[{"count":0,"href":"https:\/\/zeta.geckotribe.com\/alpha-gecko\/wp-json\/wp\/v2\/posts\/169\/revisions"}],"wp:attachment":[{"href":"https:\/\/zeta.geckotribe.com\/alpha-gecko\/wp-json\/wp\/v2\/media?parent=169"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zeta.geckotribe.com\/alpha-gecko\/wp-json\/wp\/v2\/categories?post=169"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zeta.geckotribe.com\/alpha-gecko\/wp-json\/wp\/v2\/tags?post=169"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}