Similar to Cross Site Scripting vulnerability

_-_-_Adam · 27th March 2010, 02:26 AM

Hi all,

My user name is tilde character tilde character Adam

~~Adam

when I look for my posts in the forum, it comes up with someone elses posts. (I'm assuming someone called "adam" without the tildes in front).

Also my join date is wrong, most likely related to the incorrect user.

I joined this year but it says I joined in 2001.

So it looks as though the Username field is not being parsed and stored in the database properly. To compound this instead of using a numerical ID field to search for poosts from a User, the website is using the Username to search for the posts, not a good idea.

planet10 · 27th March 2010, 02:43 AM

tilde is an illegal character for a unser name. Causes all sorts of havok. We haven't gotten the moniker parser working properly. Please provide another user name a>z (caps OK), 0>9, -, space, _

dave

_-_-_Adam · 27th March 2010, 02:56 AM

where do I change it? had a quick look but can't find it...

planet10 · 27th March 2010, 07:13 AM

You can't change it... it takes an admin. Just mail your choice to me and i'll fix it.

dave

27th March 2010, 02:26 AM	#1
_-_-_Adam diyAudio Member Join Date: Jan 2010	Similar to Cross Site Scripting vulnerability Hi all, My user name is tilde character tilde character Adam ~~Adam when I look for my posts in the forum, it comes up with someone elses posts. (I'm assuming someone called "adam" without the tildes in front). Also my join date is wrong, most likely related to the incorrect user. I joined this year but it says I joined in 2001. So it looks as though the Username field is not being parsed and stored in the database properly. To compound this instead of using a numerical ID field to search for poosts from a User, the website is using the Username to search for the posts, not a good idea.

27th March 2010, 02:43 AM	#2
planet10 frugal-phile(tm) diyAudio Moderator Join Date: Oct 2001 Location: Victoria, BC, NA, Sol III Blog Entries: 5	tilde is an illegal character for a unser name. Causes all sorts of havok. We haven't gotten the moniker parser working properly. Please provide another user name a>z (caps OK), 0>9, -, space, _ dave __________________ community sites t-linespeakers.org, frugal-horn.com, frugal-phile.com ........ commercial site planet10-HiFi p10-hifi forum here at diyA

27th March 2010, 07:13 AM	#4
planet10 frugal-phile(tm) diyAudio Moderator Join Date: Oct 2001 Location: Victoria, BC, NA, Sol III Blog Entries: 5	You can't change it... it takes an admin. Just mail your choice to me and i'll fix it. dave __________________ community sites t-linespeakers.org, frugal-horn.com, frugal-phile.com ........ commercial site planet10-HiFi p10-hifi forum here at diyA

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
LM3875 abuse vulnerability	Puffin	Chip Amps	9	14th December 2008 12:46 PM
I'm Looking for this Similar Schematic !	calico88	Tubes / Valves	7	21st April 2008 03:48 AM
similar to SKA	djk	Solid State	6	7th June 2007 03:28 PM
re-using Sillpads and similar	AndrewT	Parts	0	22nd January 2007 02:20 PM
looking for similar FET	Ahmad_tbp	Solid State	5	6th May 2006 09:26 PM


	Please consider donating to help us continue to serve you. Ads on/off / Custom Title / More PMs / More album space / Advanced printing & mass image saving

27th March 2010, 02:56 AM	#3
_-_-_Adam diyAudio Member Join Date: Jan 2010	where do I change it? had a quick look but can't find it...

New To Site?	Need Help?
Register to Participate Search Privacy Statement Contact Us	Frequently Asked Questions Did you forget your password? Mark Forums Read