Home
Monday, December 11, 2017
5:03:07 PM
Users online: 0   You are here >> Home > Security

Forums | Security Forums search
Forum FAQ
   
 Previous Page 1 | 2 | 3 Next Page 
I Invite You To Break My Site
robzy 
17/4/08 12:31:56 PM
Hero
Immortal


Quote by superfireydave
Quote by robzy
[
Allowing HTML in any field is just bad bad bad.


I know that! Don't lecture me :<
I just wanted to see how people could break it =P


Heh, sorry, I did forget that you already knew that stuff.

Although that begs the question... why open the site up to anyone with such a glaring problem? :P

Rob.

-----
&#1506;&#1501; &#1497;&#1513;&#1512;&#1488;&#1500; &#1495;&#1497;

smadge1 
17/4/08 12:32:57 PM
Immortal

aww, he reset it :(

-----

at first i was like:
{:|
but then:
}:D
I lol'd

[ .. The WHS Guy .. ]

http://geocline.net/
17938

Linux_Inside V2 
17/4/08 12:33:01 PM
Immortal

Quote by robzy
Quote by superfireydave
Quote by robzy
[
Allowing HTML in any field is just bad bad bad.


I know that! Don't lecture me :<
I just wanted to see how people could break it =P


Heh, sorry, I did forget that you already knew that stuff.

Although that begs the question... why open the site up to anyone with such a glaring problem? :P

Rob.



Because it's obviously an oversight on his behalf :P

-----
Quote by Damo
Although no doubt watching your mother being repeatedly stabbed with a 2 inch stabbing device must be a traumatic experience worthy of future councelling.



superfireydave 
17/4/08 12:38:14 PM
Titan

Quote by Linux_Inside V2
Not hard to implement... SANITISE YOUR INPUTS


I know it's not hard to implement :|
The reason I asked for people to break it is so I can see everything I haven't done properly after coding for a few hours at 2am :|
Settle petal *hugs*

-----
Mreow?

Hentai Bob 
17/4/08 12:38:35 PM
Champion

Clicking your link is now doing odd things man. The sight shows up fine for a couple of second s then leaps to here:

http://www.meatspi</a%3E%3C/td%3E%20%20%20%20%20%20%20%20%3Ctd%3EAustralia%3C/td%3E%20%20%20%2


Edited by Hentai Bob: 17/4/2008 12:39:36 PM

-----

Quote by Saponification
Hentai Bob, you're my fucking god.



superfireydave 
17/4/08 12:39:26 PM
Titan

Quote by robzy
Heh, sorry, I did forget that you already knew that stuff.

Although that begs the question... why open the site up to anyone with such a glaring problem? :P

Rob.


See my last post =P

-----
Mreow?

Sneddo 
17/4/08 12:39:39 PM
Hero
Immortal


Lol...someone added a meta refresh to meatspin. But it got truncated...

-----

khendar 
17/4/08 12:39:57 PM
Hero
Immortal


Okay. Who's the wise guy ?

Some people are at work you fucking prick =(

-----
Atomic Race Around Australia Charity Challenge
http://www.atomicmpc.com.au/forums.asp?s=1&c=1&t=120580

Chuck Norris has a Khendar T-Shirt

Linux_Inside V2 
17/4/08 12:40:06 PM
Immortal

Quote by Sneddo
Lol...someone added a meta refresh to meatspin. But it got truncated...



Guilty

-----
Quote by Damo
Although no doubt watching your mother being repeatedly stabbed with a 2 inch stabbing device must be a traumatic experience worthy of future councelling.



smadge1 
17/4/08 12:48:08 PM
Immortal

Quote by Linux_Inside V2
Quote by Sneddo
Lol...someone added a meta refresh to meatspin. But it got truncated...



Guilty



ban

-----

at first i was like:
{:|
but then:
}:D
I lol'd

[ .. The WHS Guy .. ]

http://geocline.net/
17938

Arthur F 
17/4/08 12:48:24 PM
Champion

*forwards site to /b/*

-----
Major league infidel

FUN FACT:
Charles Manson studied Scientology for over 150 hours while in prison, and then rejected it, believing it was 'too crazy'.

khendar 
17/4/08 12:49:40 PM
Hero
Immortal


Quote by smadge1
Quote by Linux_Inside V2
Quote by Sneddo
Lol...someone added a meta refresh to meatspin. But it got truncated...



Guilty



ban



Second.

-----
Atomic Race Around Australia Charity Challenge
http://www.atomicmpc.com.au/forums.asp?s=1&c=1&t=120580

Chuck Norris has a Khendar T-Shirt

robzy 
17/4/08 12:53:27 PM
Hero
Immortal


I don't think that stripping out the HTML tags is the right way to do it. I reckon youre better off sanitizing them so that they are rendered as HTML tags. That way if you have the nickname "<radlero>bber" it wont get truncated.

Rob.

-----
&#1506;&#1501; &#1497;&#1513;&#1512;&#1488;&#1500; &#1495;&#1497;

Linux_Inside V2 
17/4/08 12:54:49 PM
Immortal

BAH!

The meta refresh didn't work anyway, what are you whining about?

-----
Quote by Damo
Although no doubt watching your mother being repeatedly stabbed with a 2 inch stabbing device must be a traumatic experience worthy of future councelling.



superfireydave 
17/4/08 12:56:26 PM
Titan

Quote by robzy
I don't think that stripping out the HTML tags is the right way to do it. I reckon youre better off sanitizing them so that they are rendered as HTML tags. That way if you have the nickname "<radlero>bber" it wont get truncated.

Rob.


It's not ideal but it literally took 2 extra lines of code to add in =P
I figured I might add it now to stop people at work who are trying to help potentially getting in trouble due to other people being asshats.


Edited by superfireydave: 17/4/2008 12:56:41 PM

-----
Mreow?

khendar 
17/4/08 12:57:08 PM
Hero
Immortal


Quote by Linux_Inside V2
BAH!

The meta refresh didn't work anyway, what are you whining about?



Someone else put a link to goatse - and you attempting to redirect to meatspin is equally fucking irresponsible. Grow the fuck up.

-----
Atomic Race Around Australia Charity Challenge
http://www.atomicmpc.com.au/forums.asp?s=1&c=1&t=120580

Chuck Norris has a Khendar T-Shirt

Linux_Inside V2 
17/4/08 12:58:30 PM
Immortal

Quote by khendar
Quote by Linux_Inside V2
BAH!

The meta refresh didn't work anyway, what are you whining about?



Someone else put a link to goatse - and you attempting to redirect to meatspin is equally fucking irresponsible. Grow the fuck up.



Fuck off Khendar, the fucking redirect didn't work anyway.

if your work is so precious to you, you'd be working rather than whining here.

-----
Quote by Damo
Although no doubt watching your mother being repeatedly stabbed with a 2 inch stabbing device must be a traumatic experience worthy of future councelling.



khendar 
17/4/08 1:00:53 PM
Hero
Immortal


Quote by Linux_Inside V2
Quote by khendar
Quote by Linux_Inside V2
BAH!

The meta refresh didn't work anyway, what are you whining about?



Someone else put a link to goatse - and you attempting to redirect to meatspin is equally fucking irresponsible. Grow the fuck up.



Fuck off Khendar, the fucking redirect didn't work anyway.

if your work is so precious to you, you'd be working rather than whining here.




I'm on my lunch break. You tried to send everyone to meatspin. Its inconsiderate and irresponsible. I have clients walking in and out all the time. Have some god damn respect.

-----
Atomic Race Around Australia Charity Challenge
http://www.atomicmpc.com.au/forums.asp?s=1&c=1&t=120580

Chuck Norris has a Khendar T-Shirt

Linux_Inside V2 
17/4/08 1:02:35 PM
Immortal

Quote by khendar
I'm on my lunch break. You tried to send everyone to meatspin. Its inconsiderate and irresponsible. I have clients walking in and out all the time. Have some god damn respect.



No.

-----
Quote by Damo
Although no doubt watching your mother being repeatedly stabbed with a 2 inch stabbing device must be a traumatic experience worthy of future councelling.



TheFrunj 
17/4/08 1:05:07 PM
Titan

This does not bode well :(

Just put up and shut up LIV2, and put the link in the bin.

-----
Minister of Technology

Q6600@3.4GHz,1.34V | Tuniq Tower | Gigabyte P35-DS4 | 2GB 916MHz | Galaxy 8800GT @724/1816/1982 | Corsair 620HX | Auzentech X-Fi Prelude | 320GB Seagate | P182 Gunmetal

Australia says NO to Velociraptors!

 Previous Page 1 | 2 | 3  | Next Page 
Forums | Security