Jamie-C
Member
Registered: 3rd Jun 08
Location: Ballycastle
User status: Offline
|
quote:
Originally posted by Paul_J
I can't register, tells me all usernames are taken
|
Gazdaman
Member
Registered: 30th Aug 07
Location: Leicester
User status: Offline
|
All passwords are encrypted, as Luke pointed out earlier.
I've fixed the registering bug, I used the same variable name twice in the function!
I've also tweaked the projects page, so it's listed by vehicle, so you can have as many 'projects' on one vehicle, rather than editing one over and over.
I agree about first impressions, hence why I'm trying to test it on a relatively small user group before I advertise it widely.
I really appreciate all the feedback so far, I've acted on most of it.
|
Matty SRi
Member
Registered: 3rd Dec 08
Location: Stockton-on-Tees Drives: Mk3 Golf GTi
User status: Offline
|
y does it call me a cunt when i go on the site??
|
nyzrox
Member
Registered: 19th Jan 06
Location: Nottinghamshire Drives: MK4 Astra GSi
User status: Offline
|
quote:
Originally posted by Matty SRi
y does it call me a cunt when i go on the site??
I get the same popup.
C u n t
|
Gazdaman
Member
Registered: 30th Aug 07
Location: Leicester
User status: Offline
|
Sigh.
Guess it has a security hole!
|
xa0s
Banned
Registered: 4th Mar 08
Location: Dartford, Kent Car: Turbo'd Fabia vRS
User status: Offline
|
pmsl
|
Paul_J
Member
Registered: 6th Jun 02
Location: London
User status: Offline
|
quote:
Originally posted by Gazdaman
Sigh.
Guess it has a security hole!
Not really a safe site for users to use, if it allows things like SQL injection and cross site scripting.
and in these sort of sites, security is 'EXTREMELY' important, you're collecting user's private information.
|
Jamie-C
Member
Registered: 3rd Jun 08
Location: Ballycastle
User status: Offline
|
Access forbidden!
|
xa0s
Banned
Registered: 4th Mar 08
Location: Dartford, Kent Car: Turbo'd Fabia vRS
User status: Offline
|
there's gunna be other ways in, it's so messy lol
|
Jamie-C
Member
Registered: 3rd Jun 08
Location: Ballycastle
User status: Offline
|
I don't know nothing about making websites etc, has someone 'hi-jacked' his site and made it call people a badger? 
|
Gazdaman
Member
Registered: 30th Aug 07
Location: Leicester
User status: Offline
|
I've just taken it offline for a short time, the 'user' highlighted that executable code could be put into some of the text boxes.
Not the most constructive way to point it out, but still now I know what's wrong and how to fix it.
|
xa0s
Banned
Registered: 4th Mar 08
Location: Dartford, Kent Car: Turbo'd Fabia vRS
User status: Offline
|
quote:
Originally posted by Jamie-C
I don't know nothing about making websites etc, has someone 'hi-jacked' his site and made it call people a badger?
At least you admit it
|
Brett
Premium Member
Registered: 16th Dec 02
Location: Manchester
User status: Offline
|
Who's the comedian who made it do that? haha
Doesn't sound like anything new from the description, haven't actually seen the site because it's down. I remember registering on cardomain like 10 years ago and that was a car project website.
|
Ojc
Member
Registered: 14th Nov 00
Location: Reading: Drives : Clio 197
User status: Offline
|
quote:
Originally posted by Ian
vxrmarc's Astra.
Sold it, got a Focus RS the fucking bender.
|
Brett
Premium Member
Registered: 16th Dec 02
Location: Manchester
User status: Offline
|
quote:
Originally posted by Ojc
quote:
Originally posted by Ian
vxrmarc's Astra.
Sold it, got a Focus RS the fucking bender.
Did he get more money than another VXR of same year/mileage etc?
Just wondering if his efforts were worthwhile.
|
xa0s
Banned
Registered: 4th Mar 08
Location: Dartford, Kent Car: Turbo'd Fabia vRS
User status: Offline
|
He didn't do it to make money...
|
Brett
Premium Member
Registered: 16th Dec 02
Location: Manchester
User status: Offline
|
quote:
Originally posted by xa0s
He didn't do it to make money...
I never said he did?
I asked if it was worth more than a car of same year/mileage, which you'd hope it would be by being so clean. Thanks for your input anyway, as useless as it may be.
|
xa0s
Banned
Registered: 4th Mar 08
Location: Dartford, Kent Car: Turbo'd Fabia vRS
User status: Offline
|
Well why is it only worthwhile if he made more than what other VXR's are worth you idiot?
|
Brett
Premium Member
Registered: 16th Dec 02
Location: Manchester
User status: Offline
|
Me the idiot? PMSL that's rich coming from a pleb like you
You clearly can't comprehend a simple question. Hopefully someone else will respond who can.
It's quite simple...
Car A: Been washed and looked after like a normal person, once a week and the occasional polish.
Car B: Mega anal owner, All of the above plus using ear buds to clean the gaps between panels, mineral water for washing, paint depths checked, etc.
You'd hope car B would be worth more.
Again, in no way have I referenced his intentions on why he cleans his car in such a fashion. Obviously it's his profession, but if it's not worth more than another one that has been cleaned like a normal person then IN MY OPINION it's pointless, you fuckin smashed up faced little grannies boy 
|
Jamie-C
Member
Registered: 3rd Jun 08
Location: Ballycastle
User status: Offline
|
I wouldn't say its pointless, its what he wants to do to his car, a Corsa Sport with Speedlines wouldn't be worth more than one with Sport wheels, so would that be pointless?
As you said, its your opinion 
|
xa0s
Banned
Registered: 4th Mar 08
Location: Dartford, Kent Car: Turbo'd Fabia vRS
User status: Offline
|
quote:
Originally posted by loafofbrett
Did he get more money than another VXR of same year/mileage etc?
Just wondering if his efforts were worthwhile.
It's his choice, his hobbie. If he wants to spend money on it and so on then it's clearly worthwhile. Everyone on here has been into the modifying scene it seems and we never make money off it, we do it because we enjoy it... It's a silly fucking comment to say if he didn't sell it for X amount of money then it hasn't been worthwhile you cock, stop trying to twist it around now, you clearly said the above comment
Someone buying a Corsa and spending thousands on it putting a XE into it and so on, only to put it back to standard and sell it for the same price as you'd get for a standard Corsa looked after by a granny. Does that mean his efforts weren't worthwhile, even though he enjoyed it and loved the car, learn tons and got lots of attention? Does it fuck
[Edited on 14-02-2010 by xa0s]
|
Paul_J
Member
Registered: 6th Jun 02
Location: London
User status: Offline
|
I wish corsasport called me a cun t on page load
thing is you're designing your site security wrong. You're letting everything through and then scrambling around to block peoples attempts to get through.
This will ultimately fail as they'll always be something you've missed!
The opposite method is to block everything and only allow things you trust to get through.
[Edited on 14-02-2010 by Paul_J]
|
xa0s
Banned
Registered: 4th Mar 08
Location: Dartford, Kent Car: Turbo'd Fabia vRS
User status: Offline
|
quote:
Originally posted by Paul_J
thing is you're designing your site security wrong. You're letting everything through and then scrambling around to block peoples attempts to get through.
This will ultimately fail as they'll always be something you've missed!
The opposite method is to block everything and only allow things you trust to get through.
[Edited on 14-02-2010 by Paul_J]
This man speaks the truth, including shit like allowing anyone to brute force phpMyAdmin, it's a simple one-line fix in a .htaccess file
[Edited on 14-02-2010 by xa0s]
|
John
Member
Registered: 30th Jun 03
User status: Offline
|
Not everybody is a super dooper H@x0r like you though Luke.
|
Ian
Site Administrator
Registered: 28th Aug 99
Location: Liverpool
User status: Offline
|
I think we overlooked the actual challenges.
So tell the guy the htaccess fix.
That would be preferable to a cock-polishing lecture on security.
|
