Click here and enter your name if you wish to sign a petition to remove my right to make new petitions, and as a secondary effect I shall agree to limit myself to 1 thread per week with up to 3 in case of emergancies.
posted
Why does a little popup saying *doom* keep on popping up when I'm on that page? Kinda freakin me out ...
Posts: 2827 | Registered: Jul 2005
| IP: Logged |
Blayne, it appears you are not accounting for someone putting code into the form entry fields. If you are using a database, you are likely exposed to injection attacks. You are definitely exposed to people adding HTML and Javascript into those fields.
Posts: 26071 | Registered: Oct 2003
| IP: Logged |
posted
I meant to add that this is not a minor risk - it would be trivial for someone to point to malicious code from your site because of this vulnerability, or simply redirect to an objectionable site.
Posts: 26071 | Registered: Oct 2003
| IP: Logged |
posted
Indeed, this is a truly classic security vulnerability. ZOMG u haev been teh h4xx0red!
Posts: 10645 | Registered: Jul 2004
| IP: Logged |
Blayne Bradley
unregistered
posted
I saw the code whenever I checked it in PSQL but I did not think it actually does anything as I never on the page long enough to see anything.
IP: Logged |
Blayne Bradley
unregistered
posted
That is actually pretty cute, how does one disable code inserted into the page?
IP: Logged |
posted
He seems to guard at least against basic SQL injection, but yeah, he's vulnerable to html injection.
Blayne, you need to (at minimum) replace left angle brackets and ampersands with their html escape sequence before you insert things into the database. Also, you should check the length of input. If someone enters something too long, it causes an exception (probably because the DB insert fails).
Posts: 15770 | Registered: Dec 2001
| IP: Logged |
posted
I love that Blayne complains about profanity and then has several posts with profanity in this thread, including the one in which he complains about it.
posted
Blayne, I can't give advice about protecting your website, but I do have a little advice about protecting yourself.
Stop making it so fun for people to torment you. If it's easy to get a rise out of you, people will poke you to see you jump. Yes, they're acting like jerks by doing it, but if you try to make yourself a little less of a tempting target it will help. Because right now the way you act on the forums is like painting a giant "please mess with me" sign and attaching it to your forehead.
Posts: 9866 | Registered: Apr 2002
| IP: Logged |
posted
Blayne, Unless you are restricting it to one entry per IP, it's very likely that the people poking at you is just one person, namely jebus. In any case, your profanity and basic conduct here isn't proper.
---
I've got to admit, having Blayne's cry for attention based on "Hey, don't you dislike me?" turning around on him by someone who is saying that they dislike him and then Blayne getting upset about it is pretty amusing to me. And the "Hey you &%^&, stop %^&%^ cursing." is just the ironic icing on the cake.
Posts: 10177 | Registered: Apr 2001
| IP: Logged |
Blayne Bradley
unregistered
posted
I wasnt asking people to stop cursing, I was asking people to act like decent human beings and to stop insulting me in something that I made myself. Either way I redirected the link to someone else's work, hope your happy.
posted
Aw, but now no one will be able to keep up on the rivalry between your old lover wellhungx69x and and your new boyfriend stevetheman.
Posts: 3564 | Registered: Sep 2001
| IP: Logged |
posted
Blayne, You need to stop using profanity. It is not appropriate for this board.
And, as I pointed out, your "people" is probably just one person who is reacting to the giant target you paint on yourself.
This is going to keep happening everywhere you go until you grow up.
Posts: 10177 | Registered: Apr 2001
| IP: Logged |
Blayne Bradley
unregistered
posted
And geuss what I linked to a place easily reached by this "family-friendly" forum where people posted inappropriate profanity so from this site it is easily linked to somewhere where people posted said profanity. I asked merely for people to post their names, and instead they posted garbage.
IP: Logged |
quote:Originally posted by Blayne Bradley: And geuss what I linked to a place easily reached by this "family-friendly" forum where people posted inappropriate profanity so from this site it is easily linked to somewhere where people posted said profanity. I asked merely for people to post their names, and instead they posted garbage.
That's unfortunate. How does that make it OK for you to post profanity on the forum though?
Posts: 3275 | Registered: May 2007
| IP: Logged |
Blayne Bradley
unregistered
posted
I apologize for my profanity but really the immature jerks have to stop acting like jerks.
IP: Logged |
quote:Originally posted by Blayne Bradley: I am grown up, I just don't tolerate other people's stupidity very well, someone is doing it and so far no one has fessed up.
::waves arms:: I was doing it, though not the only one. The Uranus Hertz one made me chuckle, whoever put it up.
Posts: 3564 | Registered: Sep 2001
| IP: Logged |
posted
No, the proper, adult response is "Sorry about that. I'll go edit it out." (edit: Good on you. You eventually got there.)
Showing consideration for others is an important trait to develop. It is excedingly difficult to care that your cry for attention didn't go the way you planned when you so clearly only care about your own concerns.
Posts: 10177 | Registered: Apr 2001
| IP: Logged |
posted
Whining, pouting, swearing, and blaming other people for your bad behavior are not grown up behavior. "I just . . . but he did . . ." are phrases that are heard on elementary school playgrounds, not in adult conversations.
By acting this way, you are making it fun for people to annoy you.
Posts: 9866 | Registered: Apr 2002
| IP: Logged |
Blayne Bradley
unregistered
posted
How was I crying for attention? I made a fun little webapp and I wanted Hatrack to participate not abuse it.
IP: Logged |
quote:Originally posted by Blayne Bradley: How was I crying for attention? I made a fun little webapp and I wanted Hatrack to participate not abuse it.
This whole thread, along with the high number of threads you continually start, seem to say "look at meeeeeee!!"
Whether that's their intention or not, that's how they come across.
Posts: 16551 | Registered: Feb 2003
| IP: Logged |
posted
Huh, what are you on about potato head? This thread had a very interesting subject that had nothing to do with focusing people's attention onto Blayne.
Posts: 3564 | Registered: Sep 2001
| IP: Logged |
Blayne Bradley
unregistered
posted
I intent my threads to be usually whimsical and silly not as desperate cries of attention as I have plenty of people at college who are entertained by my eveyr eccentricies.
IP: Logged |
posted
Blayne, you asked how you were crying for attention. I answered you politely. I'm not going to argue about whether the perception is correct or justified or not, but I promise you, it is a common perception of you out there.
Posts: 16551 | Registered: Feb 2003
| IP: Logged |
quote:Originally posted by Blayne Bradley: I am grown up, I just don't tolerate other people's stupidity very well, someone is doing it and so far no one has fessed up.
::waves arms:: I was doing it, though not the only one. The Uranus Hertz one made me chuckle, whoever put it up.
That was me. It was from an old (censored in several markets) Dilbert strip.
Posts: 3275 | Registered: May 2007
| IP: Logged |
quote:I intent my threads to be usually whimsical and silly not as desperate cries of attention as I have plenty of people at college who are entertained by my eveyr eccentricies.
No, you don't, though I'll grant that you may not realize what you are doing. You intend to focus people's attention and conversation on you. This is exceedingly obvious. You are not subtle.
You know how people tell you that various threads you make are better suited for a blog. That's why.
You are very self-centered and show little concern for anyone else. I've come to believe that you don't realize this though. I think you'd benefit from working on this. You might do well to take an active interest in some of the people at Hatrack as more than an audience for you.
---
disclaimer: I'm a mean man. People here will tell you that I'm a big old meanie who just hates people and tries to make them feel bad.
That being said, I worry that you are going to waste your life stuck in permenant 14 year old hood. I would love to see you post in about 2 or 3 years about how you silly you realized you used to be and now that you've moved out of your parents' house, gotten a girlfriend, are holding down a pretty good job, and don't spend all of your free time playing video games, you've really seen what benefits adult life can have. And also that people seem not to pick on you at all as much anymore.
I want that for you, but you've got some serious flaws that are standing in the way of that. You need to deal with them if what I want for you is ever going to come about.
Posts: 10177 | Registered: Apr 2001
| IP: Logged |
And in case you haven't figured out, Blayne, the reason so many people respond to your threads, even when it is bad form, is that most of think you could be good Hatracker, if you'd actually pay attention to how you act here, pay attention to how respected members act here, and reconcile the differences. That doesn't mean be like everyone else, it means play by the rules, even the unofficial social rules, which should be quite apparent to you at this point, and are different than most other forums on the net.
quote:Originally posted by Blayne Bradley: How was I crying for attention? I made a fun little webapp and I wanted Hatrack to participate not abuse it.
This whole thread, along with the high number of threads you continually start, seem to say "look at meeeeeee!!"
Whether that's their intention or not, that's how they come across.
Given Blayne's OP, I think its fairly obvious that this thread was made as a joke. Probably in response to his thread asking for a theme song where he was ripped to pieces. Notice that he said
quote:as a secondary effect I shall agree to limit myself to 1 thread per week with up to 3 in case of emergancies.
I initially viewed this thread as an attempt, on Blayne's part, to try to get over the hostilities from his other threads in a light-hearted way.
Posts: 1327 | Registered: Aug 2007
| IP: Logged |
posted
So did I. If this thread had been taken seriously, some of the results certain posters so desperately seek may have come to pass. Alas, it was not meant to be.
(edit: not that I advocate taking things seriously as a general rule. In most cases it is far more appropriate to take things as silly-y as possible.)
Posts: 2596 | Registered: Jan 2006
| IP: Logged |
posted
The problem with this thread is the re-occurring problem that Blayne has that manifests itself in his second post. If he's making a joke thread, he should be prepared for jokes on himself.
posted
Is anybody else reminded of Ignatius from A Confederacy of Dunces?
(I just read it last week so it's fresh in my mind. Maybe it's too fresh in my mind so perhaps I am hasty in my comparison)
Posts: 1572 | Registered: Jan 2004
| IP: Logged |
Printer-friendly view of this topic
