Scratch
archived forums
#52 2012-10-02 11:45:22
Re: EternityX1 Development Topic
XenoK wrote:
We are prolly gonna add recaptcha tothe signup page when i make that. I want you to make some security enhancements to what we have, and proof checking the current new user files. I have on my calendar to make enhancements to the user_edit.php file today, i already have some things in mind.
ok
Me live on 2.0 now
Offline
#53 2012-10-03 04:12:12
Re: EternityX1 Development Topic
XenoK wrote:
chongyian wrote:
Not trying to interfere, but ... OMG! XenoK! you are from singapore too?
Im from the US
http://xenokian.blogspot.sg/? sg?
Offline
#54 2012-10-03 07:53:51
Re: EternityX1 Development Topic
chongyian wrote:
XenoK wrote:
chongyian wrote:
Not trying to interfere, but ... OMG! XenoK! you are from singapore too?
Im from the US
http://xenokian.blogspot.sg/? sg?
Thats blogger conversion. For me it shows up as .com
blogger tracks what region you are in, and based on what extensions they have registered, they automatically convert it to that region. I am from the United States. The internet is fascinating, isnt it? Thats what we are trying to harness here at eternity incurakai, the power to amaze.
Last edited by XenoK (2012-10-03 07:59:54)
Eternity Tasks has launched into Alpha One!
Offline
#55 2012-10-03 08:05:07
Offline
#56 2012-10-03 14:16:50
Re: EternityX1 Development Topic
P110, could you login to the site, (the login page is currently unaffected by maintenance), and test out the new editing page? Don't use the link in the admin panel, that's a different file that I'll add later. go here to test it when you're logged in.
Eternity Tasks has launched into Alpha One!
Offline
#60 2012-10-03 22:04:48
Re: EternityX1 Development Topic
I had some issues with styling the label element for some reason, so we'll have to wrap a div around it with the class labelwrap whenever we make a new form to style it correctly. Should I keep the background transition for each field?
Eternity Tasks has launched into Alpha One!
Offline
#64 2012-10-04 15:56:32
Re: EternityX1 Development Topic
XenoK wrote:
P110, could you login to the site, (the login page is currently unaffected by maintenance), and test out the new editing page? Don't use the link in the admin panel, that's a different file that I'll add later. go here to test it when you're logged in.
Works fine! And I like all of the new fields you've added, very professional!!
Me live on 2.0 now
Offline
#65 2012-10-04 15:58:50
Re: EternityX1 Development Topic
P110 wrote:
XenoK wrote:
P110, could you login to the site, (the login page is currently unaffected by maintenance), and test out the new editing page? Don't use the link in the admin panel, that's a different file that I'll add later. go here to test it when you're logged in.
Works fine! And I like all of the new fields you've added, very professional!!
how do you like the tabs?
Eternity Tasks has launched into Alpha One!
Offline
#68 2012-10-04 20:34:26
Re: EternityX1 Development Topic
I'm extremely sorry if I am intruding on your thread, but I would like to suggest that you improve the security of your login system.
It's currently very easily broken. I was able to log in as any arbitrary user with an extremely simple piece of SQL injection.
Offline
#69 2012-10-04 20:36:51
Re: EternityX1 Development Topic
trinary wrote:
I'm extremely sorry if I am intruding on your thread, but I would like to suggest that you improve the security of your login system.
It's currently very easily broken. I was able to log in as any arbitrary user with an extremely simple piece of SQL injection.
This can be fixed by simply escaping SQL data.
Goodbye, Scratch 1.4
Hello Scratch 2.0! 
Offline
#70 2012-10-04 20:39:05
Re: EternityX1 Development Topic
jvvg wrote:
trinary wrote:
I'm extremely sorry if I am intruding on your thread, but I would like to suggest that you improve the security of your login system.
It's currently very easily broken. I was able to log in as any arbitrary user with an extremely simple piece of SQL injection.This can be fixed by simply escaping SQL data.
Something which they are currently /not/ doing.
Offline
#71 2012-10-04 20:44:44
Re: EternityX1 Development Topic
trinary wrote:
jvvg wrote:
trinary wrote:
I'm extremely sorry if I am intruding on your thread, but I would like to suggest that you improve the security of your login system.
It's currently very easily broken. I was able to log in as any arbitrary user with an extremely simple piece of SQL injection.This can be fixed by simply escaping SQL data.
Something which they are currently /not/ doing.
It\'s a problem. 
When I took programming at school, one of the units was in security. We learned absolutely nothing there. The whole class was a total waste of my time.
I learned real programming security through the internet, where I learned that whenever outputting HTML user-submitted data, it needs to be escaped, no matter what context. I also learned that all submitted data used in a SQL query must be escaped.
Goodbye, Scratch 1.4
Hello Scratch 2.0! Offline
#72 2012-10-04 21:18:03
Re: EternityX1 Development Topic
trinary wrote:
I'm extremely sorry if I am intruding on your thread, but I would like to suggest that you improve the security of your login system.
It's currently very easily broken. I was able to log in as any arbitrary user with an extremely simple piece of SQL injection.
will do. it's on my list of todos:
> fix WHOIS info
> fix security on login
> go through all current user_ files and debug, and fix spelling mistakes, and digital organization
Eternity Tasks has launched into Alpha One!
Offline
#73 2012-10-04 21:36:16
Re: EternityX1 Development Topic
P110, I've fixed some of the organization problems I was having with .htaccess. Also, if the security on the Eternity Incurakai Login is [messed up], you might want to fix it on treebranch as well, because isn't your login code derived from Tree Branch's?
last edited by me - right now.
Last edited by XenoK (2012-10-04 21:50:01)
Eternity Tasks has launched into Alpha One!
Offline
