Appreciate the shout out YEGHRO . However, your latest official v1.6 is once again ...

2025-01-16 11:37:50

Appreciate the shout out YEGHRO (nprofile…eztk) . However, your latest official v1.6 is once again HIGHLY INSECURE, as it completely bypasses the security I added to the backend.

The secure NIP-98 version of your plugin is v1.5, which I've posted as a package on my GitHub::

https://github.com/robwoodgate/YEGHRO_NostrLogin/releases/tag/v1.5

Note, since the PR I made to your repository, I've added a check for the required PHP extension... it should now fail gracefully if not enabled.

I'd recommend rolling back to my version asap

Author Public Key

npub1emq0gngdvntdn4apepxrxr65vln49nytqe0hyr58fg9768z5zmfqcwa3jz

Seen on

wss://relay.primal.net wss://relay.nostr.band

Show more details

Published at

2025-01-16 11:37:50

Kind type

1 Short Text Note

Event JSON

{ "id": "a5923284dce7840c587c4c608c0170fe1d3baa259a6602e871b23f702ecf76a0", "pubkey": "cec0f44d0d64d6d9d7a1c84c330f5467e752cc8b065f720e874a0bed1c5416d2", "created_at": 1737027470, "kind": 1, "tags": [ [ "p", "f821179bd5d691c61b4356336388adadc3cc1304f49e771a87c38de7ed4fd022", "wss://hist.nostr.land", "mention" ], [ "e", "516b1e85163bb4173ff5217e7f3a15caab5c6ae1f0100f629045639579109149", "", "root" ], [ "p", "cec0f44d0d64d6d9d7a1c84c330f5467e752cc8b065f720e874a0bed1c5416d2", "wss://brb.io", "mention" ], [ "r", "wss://eden.nostr.land/" ], [ "r", "wss://nos.lol/" ], [ "r", "wss://purplepag.es/" ], [ "r", "wss://relay.refinery.coracle.tools/" ], [ "r", "wss://relay.snort.social/" ], [ "r", "wss://relay.primal.net/" ], [ "r", "wss://relay.damus.io/" ], [ "r", "wss://relay.nostr.band/" ] ], "content": "Appreciate the shout out nostr:nprofile1qy2hwumn8ghj76rfwd6zumn0wd68ytnvv9hxgqg6waehxw309ahx7um5wfjkccte9euk2emgwfhjucm0d5q3yamnwvaz7tmsw4e8qmr9wpskwtn9wvq3gamnwvaz7tmjv4kxz7fwv3sk6atn9e5k7qghwaehxw309aex2mrp0yhxvmm4de6xz6tw9enx6qgkwaehxw309aex2mrp0yhxummnw3ezucnpdejqz9nhwden5te0wfjkccte9ec8y6tdv9kzumn9wsqzp7ppz7dat453ccd5x43nvwy2mtwresfsfay7wudg0sudulk5l5pzr0eztk . However, your latest official v1.6 is once again HIGHLY INSECURE, as it completely bypasses the security I added to the backend.\n\nThe secure NIP-98 version of your plugin is v1.5, which I've posted as a package on my GitHub:: \n\nhttps://github.com/robwoodgate/YEGHRO_NostrLogin/releases/tag/v1.5\n\nNote, since the PR I made to your repository, I've added a check for the required PHP extension... it should now fail gracefully if not enabled.\n\nI'd recommend rolling back to my version asap", "sig": "6b38aa8e8cc89c816a46c817bc9b28d5327756704f2cafb9cd008460b1fe328ab4a6f01a2bf82f29cb258279f95e50872454cad9e8aeca359d820c4d8770e850" }

rob on Nostr: Appreciate the shout out YEGHRO . However, your latest official v1.6 is once again ...