Similar to Cross Site Scripting vulnerability - diyAudio
Go Back   Home > Forums > Site > Forum Problems

Forum Problems If there is a forum related problem please leave a message here so an Admin will see it.

Please consider donating to help us continue to serve you.

Ads on/off / Custom Title / More PMs / More album space / Advanced printing & mass image saving
Reply
 
Thread Tools Search this Thread
Old 27th March 2010, 02:26 AM   #1
diyAudio Member
 
Join Date: Jan 2010
Exclamation Similar to Cross Site Scripting vulnerability

Hi all,

My user name is tilde character tilde character Adam

~~Adam

when I look for my posts in the forum, it comes up with someone elses posts. (I'm assuming someone called "adam" without the tildes in front).

Also my join date is wrong, most likely related to the incorrect user.

I joined this year but it says I joined in 2001.

So it looks as though the Username field is not being parsed and stored in the database properly. To compound this instead of using a numerical ID field to search for poosts from a User, the website is using the Username to search for the posts, not a good idea.
  Reply With Quote
Old 27th March 2010, 02:43 AM   #2
frugal-phile(tm)
diyAudio Moderator
 
planet10's Avatar
 
Join Date: Oct 2001
Location: Victoria, BC, NA, Sol III
Blog Entries: 5
tilde is an illegal character for a unser name. Causes all sorts of havok. We haven't gotten the moniker parser working properly. Please provide another user name a>z (caps OK), 0>9, -, space, _

dave
__________________
community sites t-linespeakers.org, frugal-horn.com, frugal-phile.com ........ commercial site planet10-HiFi
p10-hifi forum here at diyA
  Reply With Quote
Old 27th March 2010, 02:56 AM   #3
diyAudio Member
 
Join Date: Jan 2010
where do I change it? had a quick look but can't find it...
  Reply With Quote
Old 27th March 2010, 07:13 AM   #4
frugal-phile(tm)
diyAudio Moderator
 
planet10's Avatar
 
Join Date: Oct 2001
Location: Victoria, BC, NA, Sol III
Blog Entries: 5
You can't change it... it takes an admin. Just mail your choice to me and i'll fix it.

dave
__________________
community sites t-linespeakers.org, frugal-horn.com, frugal-phile.com ........ commercial site planet10-HiFi
p10-hifi forum here at diyA
  Reply With Quote

Reply


Hide this!Advertise here!
Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
LM3875 abuse vulnerability Puffin Chip Amps 9 14th December 2008 12:46 PM
I'm Looking for this Similar Schematic ! calico88 Tubes / Valves 7 21st April 2008 03:48 AM
similar to SKA djk Solid State 6 7th June 2007 03:28 PM
re-using Sillpads and similar AndrewT Parts 0 22nd January 2007 02:20 PM
looking for similar FET Ahmad_tbp Solid State 5 6th May 2006 09:26 PM


New To Site? Need Help?

All times are GMT. The time now is 08:12 PM.


vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2014 DragonByte Technologies Ltd.
Copyright 1999-2014 diyAudio

Content Relevant URLs by vBSEO 3.3.2