Hi i was looking at somebodys profile in AIM and they had that link in there if you have seen it like "View my BuddyProfile", usually when you click on it it opens the subprofile in the same window, so i go ahead and copy the link to the subprofile and paste it into my browser window.

URL:
Code:
http://www.buddyprofile.com/viewprofile.php?username=anghellicxtc&u=MemorY
where anghellicxtc is the screen name of the person having the Buddy Profile and MemorY is the "viewer's" username. And when you click on somebodys link in their profiles it takes your screen name "MemorY" and adds it under a list so the person can see who looked at their profile. So i go ahead and changed MemorY to let's say Negative and hit go on my browser and it takes me to the profile as the new person Negative and adds them to the "People who viewed your profile list". Now someone could easily change the username to anybodys screen name and leave a message as that screen name in the guestbook or take a poll as that person or do anything, I think this should be somehow fixed so you can't pretend to be somebody else. As i said, no biggie, just a little flaw i found, im sure people found it already but hey, im sitting home and got nothing better to do on a Friday night then messing with peoples profiles because my damn tooth hurts like hell and i can't sleep because of it or go out.

Later AO