Reported Post by Tumsonis

Tumsonis · Oct 5, 2012

Tumsonis has reported a post.

Reason:

Through this guide in topic people are being scammed. I suggest to delete/edit this topic.

Post: Giving someone access to your account settings without giving them your password
Forum: RuneScape 2 Free Guides
Assigned Moderators: Frenzy, video, sypherz, Superman, -Ryan

Posted by: HappyFace01010
Original Content:

Code:
Giving someone access to your account settings without giving them your password

This is just a basic useful tutorial on how to pretty much give someone access to your account settings without giving them your username or password. They are able to change the email and some other stuff while on it though.

How do I do this?
Visit this link and sign into it. It will come up with a page 404 (Not found) but it will have a s= id if you have typed the username/password correctly. This ID is pretty much in Jagex's database saying that you have logged in and can stay logged in throughout the website until the ID expires. This goes to a 404 page because I changed mod= to a false mod although loginforn.ws still sends the s id. You will end up with a page like this:

(I blanked out some of the session ID so you guys couldn't go on my account)

Once you have got this link (copy and pasted from your address bar), go over to mod=wxw and change it to www.

Code:

[FONT="Arial"]https://secure.runescape.com/m=weblogin/g=runescape/s=[sessionid]/redirect.ws?mod=[SIZE="4"][b]wxw[/b][/SIZE]&ssl=1&dest=account_settings.ws[/FONT]

Changes to

Code:

[FONT="Arial"]https://secure.runescape.com/m=weblogin/g=runescape/s=[sessionid]/redirect.ws?mod=[SIZE="4"][b]www[/b][/SIZE]&ssl=1&dest=account_settings.ws[/FONT]

NOTE:[sessionid] will be where your s=09f3jhf2-dsie*agnaspfk thing is.

Then give them the link link with the mod being www, and they should auto sign into the account settings without a username or password at hand. You must remember that these ID's do expire every like 10 minutes or so, so make sure you give it to them in 10 minutes after you do it.

Conclusion
Hope people find this useful, you can pretty much view offences and membership using this method without having 'access' to the account. They are able to view old messages and also change the character name. You shouldn't go around giving this ID out to any random that you find. People can also upgrade you without actually having you username and password with this method.

PEOPLE CAN CHANGE YOUR EMAIL ADDRESS. THIS MAY MEAN THAT THEY MAY BE ABLE TO RECOVER YOUR ACCOUNT.