Team Reboot Challenge Site
#1
Posted 04 September 2011 - 04:27 PM
#3
Posted 04 September 2011 - 06:00 PM
#4
Posted 04 September 2011 - 06:08 PM
#5
Posted 04 September 2011 - 06:09 PM
how is session handling done? OK, I have cookies disbled on my browser, but IIRC there was no cookie message. I logged in and called a challenge page. Then I logged out and called in the same browser window the start page entering the URL. I was presented a page that has the the log out link in the right top. When I log off (what in reality I can't do) I get the page that the coloumn User Id can't be null.
Many Greetings
MichaelZ
#6
Posted 04 September 2011 - 06:13 PM
Please enable cookies in the browser & let me know it you hit the same problem again.how is session handling done? OK, I have cookies disbled on my browser,
#7
Posted 04 September 2011 - 06:22 PM
Please do put your sunglasses on, as the direct view of the astoundingly contrasting colours and backgrounds used in this site may harm your eyes, don't worry, if you cannot read some text with the sunglasses on, some is NOT readable anyway, like the navy blue text on brown marble background or the thin black one on "operated" green.
BTW I already logged in both as:
"Reboot Username"
and
"b@dh@ç#3r"
I wish and hope that you and the reboot.pro board admins are NOT planning to somehow export/import the reboot.pro database of users/passwords in the future .
Double logout leads to:
http://challenge.99k...p?doLogout=true
or (example):
http://challenge.99k...allenge_Index=1
with result:
Column 'UserName' cannot be null
Wonko
#8
Posted 04 September 2011 - 06:26 PM
BTW I already logged in both as:
"Reboot Username"
and
"b@dh@ç#3r"
I wish and hope that you and the reboot.pro board admins are NOT planning to somehow export/import the reboot.pro database of users/passwords in the future .
I logged in as user test. Either there is a reboot.pro user with that name or the user name is not checked yet.
Many Greetiings
MichaelZ
#9
Posted 04 September 2011 - 06:27 PM
JFYI, the page has been designed by a professional web developer, not by the person you are aiming your gun to.You won't appreciate this as "constructive" , but you should really put on login page a warning, something like:.............
If doing that ensures that Wonko will stop logging in to the board fearing his account being hacked, we'll gladly do so. BTW, we have a better plan.I wish and hope that you and the reboot.pro board admins are NOT planning to somehow export/import the reboot.pro database of users/passwords in the future .
#10
Posted 04 September 2011 - 06:29 PM
Correct you are. That's why you have been asked to leave the password field blank.I logged in as user test. Either there is a reboot.pro user with that name or the user name is not checked yet.
#11
Posted 04 September 2011 - 06:31 PM
Please enable cookies in the browser & let me know it you hit the same problem again.
I did'nt need to enable cookies. I checked cookies and I noticed that I had one for 99k.org. You only use session cookies and they are always enabled in my browser (I thought I also get a message for sesion cookies).
The problem I reported is no problem! I forgot that in between I tried to log in with no username which lead to the error message that coloumn user name was null. Then I called again the start page. But then I was already logged out as MichaelZ and half logged in as user NULL. And so the new call to the start page had the problem that it displayed the log out possibility even when the last login was rejected.
Many Greetings
MichaelZ
#12
Posted 04 September 2011 - 06:31 PM
Possibly, a small mistake. What you tried was: b@dh@ç#3rBTW I already logged in both as:
.
.
"b@dh@ç#3r"
#13
Posted 04 September 2011 - 06:35 PM
Possibly, a small mistake. What you tried was: b@dh@ç#3r
I guess Wonko posted his string UTF-8 encoded and you read the log file as ASCII?
Many Greetings
MichaelZ
#14
Posted 04 September 2011 - 06:37 PM
Can you please list out the steps to reproduce the problem?Double logout leads to:
http://challenge.99k...p?doLogout=true
or (example):
http://challenge.99k...allenge_Index=1
with result:
#15
Posted 04 September 2011 - 06:48 PM
I am aiming EXACTLY at the peep (whoever he/she is) that designed the Web site ( actually to the one that chose backgrounds and text colour and fonts).JFYI, the page has been designed by a professional web developer, not by the person you are aiming your gun to.
Whether he/she is a pro or not is completely irrelevant.
Go to:
http://challenge.99k.org/index.php
You log in as (say):
Username:MickeyMouse
Password: (leave blanck)
You get to:
http://challenge.99k.../challenges.php
Top you have "Log Out MickeyMouse" which redirects to http://challenge.99k...p?doLogout=true
Now click on:
http://challenge.99k.../challenges.php
(you have already logged off, right?)
Top you now have "Log Out" still leading to: http://challenge.99k...p?doLogout=true
Click on it.
Wonko
#16
Posted 04 September 2011 - 06:57 PM
Quite natural at this point. No authentication is there.Go to:
http://challenge.99k.org/index.php
You log in as (say):
Username:MickeyMouse
Password: (leave blanck)
You get to:
http://challenge.99k.../challenges.php
Wait. Doesn't clicking on the logout link redirect you to login page again? If so, then there is something "special" to your browser configuration.Top you have "Log Out MickeyMouse" which redirects to http://challenge.99k...p?doLogout=true
#17
Posted 04 September 2011 - 06:59 PM
Sure it does (that's the link "below" the text), but nothing prevents me to access (as NOT logged in) page http://challenge.99k.../challenges.php (example) directly, and when I try to log out again I am redirected to the mentioned page with the mentioned error.Wait. Doesn't clicking on the logout link redirect you to login page again? If so, then there is something "special" to your browser configuration.
Wonko
#19
Posted 04 September 2011 - 07:01 PM
So, do you mean that after logout, you copy-pasted the URL to the address bar & hit 'Enter'?Sure it does (that's the link "below" the text), but nothing prevents me to access (as NOT logged in) page http://challenge.99k.../challenges.php (example) directly, and when I try to log out again I am redirected to the mentioned page with the mentioned error.
#20
Posted 04 September 2011 - 07:04 PM
Sure it does (that's the link "below" the text), but nothing prevents me to access (as NOT logged in) page http://challenge.99k.../challenges.php (example) directly, and when I try to log out again I am redirected to the mentioned page with the mentioned error.
Doing that I get the page with the list of the first ten challenges having the following error message almost at top:
Warning: Cannot modify header information - headers already sent by (output started at /www/99k.org/c/h/a/challenge/htdocs/menuheader.php:69) in /www/99k.org/c/h/a/challenge/htdocs/challenges.php on line 4
Many Greetings
MichaelZ
#21
Posted 04 September 2011 - 07:05 PM
Another possibility could be to use a link in an e-mail programm.So, do you mean that after logout, you copy-pasted the URL to the address bar & hit 'Enter'?
Many Greetings
MichaelZ
#22
Posted 04 September 2011 - 07:06 PM
Very interesting. I just tested it on my local system & the page which comes up is the login page, as I planned. But, the site behaves the same way you reported.Crazy!!!
Doing that I get the page with the list of the first ten challenges having the following error message almost at top:Warning: Cannot modify header information - headers already sent by (output started at /www/99k.org/c/h/a/challenge/htdocs/menuheader.php:69) in /www/99k.org/c/h/a/challenge/htdocs/challenges.php on line 4
#23
Posted 04 September 2011 - 07:07 PM
I couldn't get you. Can you please explain?Another possibility could be to use a link in an e-mail programm.
#24
Posted 05 September 2011 - 12:28 AM
I think this bug is fixed. Can you please try it again & let me know?
Doing that I get the page with the list of the first ten challenges having the following error message almost at top:Warning: Cannot modify header information - headers already sent by (output started at /www/99k.org/c/h/a/challenge/htdocs/menuheader.php:69) in /www/99k.org/c/h/a/challenge/htdocs/challenges.php on line 4
#25
Posted 05 September 2011 - 08:16 AM
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users