People are using this hack to add items which they don’t own to their collections.
I’ve tested it, and as you can see on my profile it says I have a Purple Sparkle Time Fedora, when I actually don’t.
I’m not sure where to put the code though, shall I just paste it in here?
Note: I only added the hat to my collection to test the method.
It’s way too easy… ROBLOX should really think more about serverside checks.
I’m curious: is it a “ghost item” or do you actually own it/can wear it?
It’s just a ghost item, although it can easily be used to scam unsuspecting users.
I am so rich!!!1111
Paste it here, its not really an exploit that would do any harm really, and it should be easy enough to patch
I’m not surprised this happened
javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions(“ctl00$cphRoblox$btnAddCollectionShowase”, “”, true, “”, “”, false, true))
It’s already leaked in the comments on every expensive limited
Will fix.
