Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Facebook bug I found.

If you go to Facebook of this person - and click about.... Instead of showing you their about, it will take you to your own about section on Facebook.


https://www.facebook.com/karthic007

The reason for this is the break in the URL for the ID.

Not sure how I can replicate it yet but I think I know a way.

It's because of the custom URL + it still thinking the ID is a number set.
Oh god you are at it again with these custom URLS.

Honestly, I kinda understand it but why does it still think its an ID when it clearly is a user account.
[Image: support-brown.png]
Definitely a strange one. These don't have the issue however:
https://www.facebook.com/karthic007/about
https://www.facebook.com/profile.php?id=...7&sk=about

The difference being that the ID is not included in the link of 'about' if you follow your URL, hence it redirects you to your own profile. You won't be able to get anything out of this, except getting redirected to your own profile, I'm afraid. But you can definitely report this so they fix the URL schemes.
[Image: vp6iypF.gif]
(Jan 5, 2020 05:35 PM)MavenGradle Wrote:  Definitely a strange one. These don't have the issue however:
https://www.facebook.com/karthic007/about
https://www.facebook.com/profile.php?id=...7&sk=about

The difference being that the ID is not included in the link, hence it redirects you to your own profile. You won't be able to get anything out of this, except getting redirected to your own profile, I'm afraid. But you can definitely report this so they fix the URL schemes.

I'd prefer to identify how to replicate it with my own profile lmaoo
Maybe he made his profile as public or some other thing to get popularity
IDK because never used FB
checked famous cricketer profile
https://www.facebook.com/rahuldravid/
no issues
(Jan 5, 2020 05:36 PM)Mr. Robot Wrote:  I'd prefer to identify how to replicate it with my own profile lmaoo

It's not the number that's causing it. Let's take James Bond for example:
https://www.facebook.com/007
(Strangely enough https://m.facebook.com/007 doesn't work which appears to be another bug altogether)

It's also not the inclusion of alphabetical characters:
https://www.facebook.com/alpa0

Nor the inability to add them as friends. Even the profile ID is correctly entered as an attribute (data-gt) in the HTML of the link, the only thing that's broken is the HREF attribute for some reason. Looking more into it.

Mobile version doesn't suffer from the problem:
https://m.facebook.com/karthic007
[Image: vp6iypF.gif]
(Jan 5, 2020 05:41 PM)MavenGradle Wrote:  It's not the number that's causing it. Let's take James Bond for example:
https://www.facebook.com/007
(Strangely enough https://m.facebook.com/007 doesn't work which appears to be another bug altogether)

It's also not the inclusion of alphabetical characters:
https://www.facebook.com/alpa0

Nor the inability to add them as friends. Even the profile ID is correctly entered as an attribute (data-gt) in the HTML of the link, the only thing that's broken is the HREF attribute for some reason. Looking more into it.

Mobile version doesn't suffer from the problem:
https://m.facebook.com/karthic007

It's just kinda cool overall.
I think Karthic is just a hacker
(Jan 5, 2020 08:31 PM)gday mate Wrote:  I think Karthic is just a hacker

Oh definitely.
(Jan 5, 2020 05:41 PM)MavenGradle Wrote:  It's not the number that's causing it. Let's take James Bond for example:
https://www.facebook.com/007
(Strangely enough https://m.facebook.com/007 doesn't work which appears to be another bug altogether)

It's also not the inclusion of alphabetical characters:
https://www.facebook.com/alpa0

Nor the inability to add them as friends. Even the profile ID is correctly entered as an attribute (data-gt) in the HTML of the link, the only thing that's broken is the HREF attribute for some reason. Looking more into it.

Mobile version doesn't suffer from the problem:
https://m.facebook.com/karthic007

His link looks strange.
(Using one of the prfiles above)

Normal about link:
Code
https://www.facebook.com/alpa0/about?lst=100001341757053%3A100001446993791%3A1578302381

His about link:
Code
https://www.facebook.com/profile.php?lst=100001341757053%3A100006337560157%3A1578302148&sk=about




When I switch his ID with someone else's with the same link template it also directs me to my own profile, now the question is why does his link look like that?
[Image: C8xRvdD.png]
From what I can see, FB has two ways of generating URL for the about page.
https://www.facebook.com/PROFILENAME/abo...=RANDOMNRS
https://www.facebook.com/profile.php?id=...S&sk=about

In the first URL, the important information is the profile name and it appears inside the URL itself.
In the secound URL, FB is calling a PHP file called Profile.php which is using the Profile ID (received as a GET parameter) to generate the about page.
For the second type of URL I was able to find a single FB profile. https://www.facebook.com/profile.php?id=100045231173567
Idk if there are other link formats for the about page. I couldnt find any other

Now in the case of karthic007, facebook thinks that for some reason he should use the second type of URL but it fails to add the ID parameter

EDIT: if you acces his profile using a URL simmilar to the one used by Mark, the problem disappears https://www.facebook.com/profile.php?id=100006337560157
Mark Zitsnturds should just hire you for Facebook security.
[Image: NLux8kZ.png]
(Jan 6, 2020 03:06 AM)SIM-2362662 Wrote:  From what I can see, FB has two ways of generating URL for the about page.
https://www.facebook.com/PROFILENAME/abo...=RANDOMNRS
https://www.facebook.com/profile.php?id=...S&sk=about

In the first URL, the important information is the profile name and it appears inside the URL itself.
In the secound URL, FB is calling a PHP file called Profile.php which is using the Profile ID (received as a GET parameter) to generate the about page.
For the second type  of URL I was able to find a single FB profile. https://www.facebook.com/profile.php?id=100045231173567
Idk if there are other link formats for the about page. I couldnt find any other

Now in the case of karthic007, facebook thinks that for some reason he should use the second type of URL but it fails to add the ID parameter

EDIT: if you acces his profile using a URL simmilar to the one used by Mark, the problem disappears https://www.facebook.com/profile.php?id=100006337560157

So when you reach his profile using his custom user /karthic007/ it's bugged but when you reach his profile using his ID it works correctly.
Just tried on my profile. When I'm at my profile page and I click my name it takes me to my profile again using my user (and not my ID)
When you reach his page from /karthic007/ and click his name it corrects you to his profile but with the ID link.

My guess is that he once had custom user name link and he disabled it (if that's an option) and facebook remembers it but doesn't work correctly.
Someone please test this.

Edit:
You can't delete username once set.
Once username is set it's the default for your profile. Idk why his default is still his ID while username fucks everything up.
Please help
[Image: C8xRvdD.png]
Very interesting man, nice catch
(Jan 6, 2020 03:06 AM)SIM-2362662 Wrote:  From what I can see, FB has two ways of generating URL for the about page.
https://www.facebook.com/PROFILENAME/abo...=RANDOMNRS
https://www.facebook.com/profile.php?id=...S&sk=about

In the first URL, the important information is the profile name and it appears inside the URL itself.
In the secound URL, FB is calling a PHP file called Profile.php which is using the Profile ID (received as a GET parameter) to generate the about page.
For the second type  of URL I was able to find a single FB profile. https://www.facebook.com/profile.php?id=100045231173567
Idk if there are other link formats for the about page. I couldnt find any other

Now in the case of karthic007, facebook thinks that for some reason he should use the second type of URL but it fails to add the ID parameter

EDIT: if you acces his profile using a URL simmilar to the one used by Mark, the problem disappears https://www.facebook.com/profile.php?id=100006337560157

That is all correct and already mentioned in a comment above.

(Jan 6, 2020 03:31 AM)Zero Wrote:  So when you reach his profile using his custom user /karthic007/ it's bugged but when you reach his profile using his ID it works correctly.
Just tried on my profile. When I'm at my profile page and I click my name it takes me to my profile again using my user (and not my ID)
When you reach his page from /karthic007/ and click his name it corrects you to his profile but with the ID link.

My guess is that he once had custom user name link and he disabled it (if that's an option) and facebook remembers it but doesn't work correctly.
Someone please test this.

Edit:
You can't delete username once set.
Once username is set it's the default for your profile. Idk why his default is still his ID while username fucks everything up.
Please help

In order to change your profile URL you can do so in your settings:
https://www.facebook.com/settings?tab=ac...n=username
Please be aware that an older username will no longer be available.

Don't worry, you can change this multiple times (but not to a previous username, once you change it, the previous username is inaccessible to everyone).
[Image: vp6iypF.gif]


Possibly Related Threads...
Thread / Author Replies Views Last Post
by geoshotJul 19, 2026 08:27 AM 20 386 Jul 19, 2026 08:27 AM
Last Post: xadamxk
by ImmortalNov 2, 2023 05:09 PM 4 212 Nov 2, 2023 05:09 PM
Last Post: Sky
by MeeetirmJun 24, 2020 07:20 AM 7 155 Jun 24, 2020 07:20 AM
Last Post: Meeetirm