This is a read-only archive of the old Scratch 1.x Forums.
Try searching the current Scratch discussion forums.

#1 2012-06-18 00:54:34

jvvg
Scratcher
Registered: 2008-03-26
Posts: 1000+

Is it OK if...

Is it OK if I write a little PHP script that can get the actual post count of a user by using an automated search script?


http://tiny.cc/zwgbewhttp://tiny.cc/e1gbewhttp://tiny.cc/zygbewhttp://tiny.cc/izgbew
Goodbye, Scratch 1.4  sad                                                        Hello Scratch 2.0!  smile

Offline

 

#2 2012-06-18 01:00:58

TorbyFork234
Scratcher
Registered: 2012-03-01
Posts: 1000+

Re: Is it OK if...

jvvg wrote:

Is it OK if I write a little PHP script that can get the actual post count of a user by using an automated search script?

Why not?

Offline

 

#3 2012-06-18 01:01:28

jvvg
Scratcher
Registered: 2008-03-26
Posts: 1000+

Re: Is it OK if...

TorbyFork234 wrote:

jvvg wrote:

Is it OK if I write a little PHP script that can get the actual post count of a user by using an automated search script?

Why not?

Because the Scratch team decided to hide the post counts, and show the levels thingy instead.


http://tiny.cc/zwgbewhttp://tiny.cc/e1gbewhttp://tiny.cc/zygbewhttp://tiny.cc/izgbew
Goodbye, Scratch 1.4  sad                                                        Hello Scratch 2.0!  smile

Offline

 

#4 2012-06-18 01:11:43

TorbyFork234
Scratcher
Registered: 2012-03-01
Posts: 1000+

Re: Is it OK if...

jvvg wrote:

TorbyFork234 wrote:

jvvg wrote:

Is it OK if I write a little PHP script that can get the actual post count of a user by using an automated search script?

Why not?

Because the Scratch team decided to hide the post counts, and show the levels thingy instead.

The scratch team decided to block img tags before and someone freely created an antidote script and the ST were ok with it.

Offline

 

#5 2012-06-18 01:41:14

jvvg
Scratcher
Registered: 2008-03-26
Posts: 1000+

Re: Is it OK if...

TorbyFork234 wrote:

jvvg wrote:

TorbyFork234 wrote:


Why not?

Because the Scratch team decided to hide the post counts, and show the levels thingy instead.

The scratch team decided to block img tags before and someone freely created an antidote script and the ST were ok with it.

Good point. Hopefully someone on the ST will give me a definitive answer.


http://tiny.cc/zwgbewhttp://tiny.cc/e1gbewhttp://tiny.cc/zygbewhttp://tiny.cc/izgbew
Goodbye, Scratch 1.4  sad                                                        Hello Scratch 2.0!  smile

Offline

 

#6 2012-06-18 05:44:13

jji7skyline
Scratcher
Registered: 2010-03-08
Posts: 1000+

Re: Is it OK if...

There was a really long topic about something similar to this a while back.


I don't know why you say goodbye, I say hello!  big_smile

Offline

 

#7 2012-06-18 07:12:58

Zeusking19
Scratcher
Registered: 2011-07-10
Posts: 1000+

Re: Is it OK if...

Couldnt you just go to Profile and check your post count?


http://i49.tinypic.com/2w7e1jm.pnghttp://dragcave.net/image/eFGFz.gifhttp://dragcave.net/image/9hE5q.gif

Offline

 

#8 2012-06-18 09:55:59

northmeister
Scratcher
Registered: 2011-07-12
Posts: 1000+

Re: Is it OK if...

Zeusking19 wrote:

Couldnt you just go to Profile and check your post count?

I think he means other users.


http://i48.tinypic.com/5a25g5.png

Offline

 

#9 2012-06-18 14:11:12

jvvg
Scratcher
Registered: 2008-03-26
Posts: 1000+

Re: Is it OK if...

northmeister wrote:

Zeusking19 wrote:

Couldnt you just go to Profile and check your post count?

I think he means other users.

I do.


http://tiny.cc/zwgbewhttp://tiny.cc/e1gbewhttp://tiny.cc/zygbewhttp://tiny.cc/izgbew
Goodbye, Scratch 1.4  sad                                                        Hello Scratch 2.0!  smile

Offline

 

#10 2012-06-18 14:17:38

bobbybee
Scratcher
Registered: 2009-10-18
Posts: 1000+

Re: Is it OK if...

jvvg wrote:

northmeister wrote:

Zeusking19 wrote:

Couldnt you just go to Profile and check your post count?

I think he means other users.

I do.

Unless, of course, you wrote an XSS injection-based crawler that would be put into a signature that would retrieve the post count and query a database. I shouldn't have mentioned that...


I support the Free Software Foundation. Protect our digital rights!

Offline

 

#11 2012-06-18 14:31:29

jvvg
Scratcher
Registered: 2008-03-26
Posts: 1000+

Re: Is it OK if...

bobbybee wrote:

jvvg wrote:

northmeister wrote:


I think he means other users.

I do.

Unless, of course, you wrote an XSS injection-based crawler that would be put into a signature that would retrieve the post count and query a database. I shouldn't have mentioned that...

Hold on, my brain just crashed...  tongue
Mine would be a simple XSS search bot (it would search and then see how many results there were).


http://tiny.cc/zwgbewhttp://tiny.cc/e1gbewhttp://tiny.cc/zygbewhttp://tiny.cc/izgbew
Goodbye, Scratch 1.4  sad                                                        Hello Scratch 2.0!  smile

Offline

 

#12 2012-06-18 14:35:39

bobbybee
Scratcher
Registered: 2009-10-18
Posts: 1000+

Re: Is it OK if...

Well, yeah. Yours would be the (semi-)allowed way, mine would require the user's browser to browse pages without the user knowing (through XSS injection)


I support the Free Software Foundation. Protect our digital rights!

Offline

 

#13 2012-06-18 14:37:20

jvvg
Scratcher
Registered: 2008-03-26
Posts: 1000+

Re: Is it OK if...

bobbybee wrote:

Well, yeah. Yours would be the (semi-)allowed way, mine would require the user's browser to browse pages without the user knowing (through XSS injection)

Oh, mine runs it all on the server and the user does know about it.
I hope someone on the Scratch team gives me a definitive answer.


http://tiny.cc/zwgbewhttp://tiny.cc/e1gbewhttp://tiny.cc/zygbewhttp://tiny.cc/izgbew
Goodbye, Scratch 1.4  sad                                                        Hello Scratch 2.0!  smile

Offline

 

#14 2012-06-18 14:39:23

RedRocker227
Scratcher
Registered: 2011-10-26
Posts: 1000+

Re: Is it OK if...

jvvg wrote:

bobbybee wrote:

jvvg wrote:

I do.

Unless, of course, you wrote an XSS injection-based crawler that would be put into a signature that would retrieve the post count and query a database. I shouldn't have mentioned that...

Hold on, my brain just crashed...  tongue
Mine would be a simple XSS search bot (it would search and then see how many results there were).

That wouldn't include deleted posts though (or would it?).

Last edited by RedRocker227 (2012-06-18 14:39:38)


Why

Offline

 

#15 2012-06-18 14:44:56

jvvg
Scratcher
Registered: 2008-03-26
Posts: 1000+

Re: Is it OK if...

RedRocker227 wrote:

jvvg wrote:

bobbybee wrote:


Unless, of course, you wrote an XSS injection-based crawler that would be put into a signature that would retrieve the post count and query a database. I shouldn't have mentioned that...

Hold on, my brain just crashed...  tongue
Mine would be a simple XSS search bot (it would search and then see how many results there were).

That wouldn't include deleted posts though (or would it?).

It wouldn't, sadly. I can't get the actual post count without the password.


http://tiny.cc/zwgbewhttp://tiny.cc/e1gbewhttp://tiny.cc/zygbewhttp://tiny.cc/izgbew
Goodbye, Scratch 1.4  sad                                                        Hello Scratch 2.0!  smile

Offline

 

#16 2012-06-18 16:22:41

chanmanpartyman
Scratcher
Registered: 2011-05-30
Posts: 500+

Re: Is it OK if...

RedRocker227 wrote:

jvvg wrote:

bobbybee wrote:


Unless, of course, you wrote an XSS injection-based crawler that would be put into a signature that would retrieve the post count and query a database. I shouldn't have mentioned that...

Hold on, my brain just crashed...  tongue
Mine would be a simple XSS search bot (it would search and then see how many results there were).

That wouldn't include deleted posts though (or would it?).

That's what a lot of people have been doing to bump up their post counts  hmm

Offline

 

#17 2012-06-19 00:20:37

jvvg
Scratcher
Registered: 2008-03-26
Posts: 1000+

Re: Is it OK if...

chanmanpartyman wrote:

RedRocker227 wrote:

jvvg wrote:


Hold on, my brain just crashed...  tongue
Mine would be a simple XSS search bot (it would search and then see how many results there were).

That wouldn't include deleted posts though (or would it?).

That's what a lot of people have been doing to bump up their post counts  hmm

Well, this would see right through it.
There's no way to see the "real" post count without the password, though.


http://tiny.cc/zwgbewhttp://tiny.cc/e1gbewhttp://tiny.cc/zygbewhttp://tiny.cc/izgbew
Goodbye, Scratch 1.4  sad                                                        Hello Scratch 2.0!  smile

Offline

 

Board footer