Admin Command showing?

Bug Reports Website Bugs
1

Look at that profile

Unsure what the bug is, but I know thats not how it should be showing, and it seems to be his profile only.

Edit: There is an error that shows in the console.

Error: [$parse:syntax] Syntax Error: Token '24' is an unexpected token at column 6 of the expression [Open 24/7] starting at [24/7].
http://errors.angularjs.org/1.2.21/$parse/syntax?p0=24&p1=is%20an%20unexpected%20token&p2=6&p3=Open%2024%2F7&p4=24%2F7
p/<@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:677
si.prototype.throwError@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:90193
si.prototype.parse@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:89570
pa/this.$get</<@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:51160
f@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:40594
yi@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:31059
wt@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:24130
bt@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:23017
bt@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:23182
bt@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:23182
bt@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:23182
bt@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:23182
bt@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:23182
bt@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:23182
bt@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:23182
bt@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:23182
bt@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:23182
bt@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:23182
bt@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:23182
bt@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:23182
kt@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:22279
ts/e/</<@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:7008
yv/this.$get</v.prototype.$eval@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:57970
yv/this.$get</v.prototype.$apply@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:58247
ts/e/<@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:6966
r@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:16768
ts/e@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:6876
ts@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:5:7078
n@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:8:853
@http://js.rbxcdn.com/cfe3513533ffbe26fd5137b92dbaf2d3.js.gzip:8:919
m.Callbacks/j@http://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.11.1.min.js:2:27239
m.Callbacks/k.fireWith@http://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.11.1.min.js:2:28057
.ready@http://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.11.1.min.js:2:29889
J@http://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.11.1.min.js:2:30255

This bug also breaks various functions of the profile page.

2

what…? “Impersonate User” Uh… I’m thinking the issue is he managed to inject stuff into the profile header but broke the rest of the section in the process, and that’s why we’re seeing weird stats.

3

[quote] what…? “Impersonate User” Uh… I’m thinking the issue is he managed to inject stuff into the profile header but broke the rest of the section in the process, and that’s why we’re seeing weird stats. [/quote]I had a look at a normal page’s source code, the admin URL for “impersonate user” is /admi/impersonateuser… so that’s a thing.

I do wonder how he broke the page like that though. I’m thinking something related to those {{ }} tags they use.

4

I found out how to break my profile.

You simply put this into your blurb. I put an extra “|” to break it.

{{profileHeaderLayout.friendsCount| | number }}
5

I found something cool you can do related to this. Set this as your blurb and look at it on your profile.

{{profileHeaderLayout.canTrade == true ? "You can":"You can't"}} trade with me. I have {{profileHeaderLayout.friendsCount}} friends as well!