🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: uk.net.web.authoring
Article #92

Re: Login bug - SMF web forum

#92
From: alan.messenger
Date: Tue, 02 Jan 2007 21:43
55 lines
3194 bytes
Pedt, morphed as "????, ??????" wrote:

> In message <mF80Y1f3wTjFFwDF@molly.mockford>, Molly Mockford
> <nospamnobody@mollymockford.me.uk> writes
> >At 07:01:46 on Sat, 23 Dec 2006, Pedt <"\"@ @\""@operations.force9.net>
> >wrote in <7fHgYjDaRNjFFwA$@stuff-the-spammers.mx2.org.uk>:
> >
> >>Owner of the site is raising it with the authors after we spotted the
> >>bug but thought I'd mention here that there is a login bug with SMF in
> >>case anyone has SMF deployed on a public site.
> >
> >Which version of SMF, Pedt?  1.1, 1.0.9 or earlier?
>
> Sorry for slow reply, away over Xmas.
>
> 1.1.1
>
> Not an SMF bug, more a user error according to the report back. Muchos
> Kudos to SMF who checked it out quickly, especially given the time of
> year. 23rd I gave the site admin the recipe for reproducing it who'd
> passed it one the same day before replying to my post.
>
>
> Site owner said this (domain munged to protect the guilty) ...
>

It was Craig Oldfield.

> <quote>
> The bods at SMF checked out my site and spotted that instead of
> http://www.deleted.co.uk/sanctuary/

http://www.craigoldfield.co.uk/sanctuary

> it was
> http://deleted.co.uk/sanctuary/

http://craigoldfield.co.uk/sanctuary

> so bypassing what should have been the normal start page. A quick change
> in the settings and job done. Certainly kudos to them for checking it
> out so quickly and being very gentle in pointing out a user error. don't
> know why it didn't show up in the last version though.
> </quote>
>
> Not had the time to chase it up with the site owner yet but it looks
> like he put http://domain not http://www.domain/ in a configuration
> file.
>
> Still worth mentioning here though IMO as others may have done the same
> especially if there's a bit of CNAMEing being done.
> 

Or they are competent.
Technical Details
Message-ID: <1167774197.999753.79210@k21g2000cwa.googlegroups.com>
Path: arc1-ca.pugleaf.net!g2news2.google.com!postnews.google.com!k21g2000cwa.googlegroups.com!not-for-mail
References: <7fHgYjDaRNjFFwA$@stuff-the-spammers.mx2.org.uk> <mF80Y1f3wTjFFwDF@molly.mockford> <a1PKC7R8ijlFFw2$@giggle2.pedtlan>

Show Full Headers
Complete Article Headers
X-Google-Thread: f5cde,e9d75aecd6074791
X-Google-Thread: 1156f6,84608f65333be8f4,start
X-Google-Attributes: gidf5cde,gid1156f6,public
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news2.google.com!postnews.google.com!k21g2000cwa.googlegroups.com!not-for-mail
From: alan.messenger@hotmail.com
Newsgroups: uk.net.web.authoring,demon.local
Subject: Re: Login bug - SMF web forum
Date: 2 Jan 2007 13:43:18 -0800
Organization: http://groups.google.com
Lines: 56
Message-ID: <1167774197.999753.79210@k21g2000cwa.googlegroups.com>
References: <7fHgYjDaRNjFFwA$@stuff-the-spammers.mx2.org.uk>
   <mF80Y1f3wTjFFwDF@molly.mockford>
   <a1PKC7R8ijlFFw2$@giggle2.pedtlan>
NNTP-Posting-Host: 141.76.45.34
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Trace: posting.google.com 1167774203 5424 127.0.0.1 (2 Jan 2007 21:43:23 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: Tue, 2 Jan 2007 21:43:23 +0000 (UTC)
User-Agent: G2/1.0
X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1,gzip(gfe),gzip(gfe)
X-HTTP-Via: 1.0 cache1:3128 (squid/2.6.STABLE5-20061208)
Complaints-To: groups-abuse@google.com
Injection-Info: k21g2000cwa.googlegroups.com; posting-host=141.76.45.34;
   posting-account=vYbroA0AAADB7y4OBbuVUJl4bE2EGrH-