Article View: uk.net.web.authoring
Article #92Re: Login bug - SMF web forum
From: alan.messenger
Date: Tue, 02 Jan 2007 21:43
Date: Tue, 02 Jan 2007 21:43
55 lines
3194 bytes
3194 bytes
Pedt, morphed as "????, ??????" wrote: > In message <mF80Y1f3wTjFFwDF@molly.mockford>, Molly Mockford > <nospamnobody@mollymockford.me.uk> writes > >At 07:01:46 on Sat, 23 Dec 2006, Pedt <"\"@ @\""@operations.force9.net> > >wrote in <7fHgYjDaRNjFFwA$@stuff-the-spammers.mx2.org.uk>: > > > >>Owner of the site is raising it with the authors after we spotted the > >>bug but thought I'd mention here that there is a login bug with SMF in > >>case anyone has SMF deployed on a public site. > > > >Which version of SMF, Pedt? 1.1, 1.0.9 or earlier? > > Sorry for slow reply, away over Xmas. > > 1.1.1 > > Not an SMF bug, more a user error according to the report back. Muchos > Kudos to SMF who checked it out quickly, especially given the time of > year. 23rd I gave the site admin the recipe for reproducing it who'd > passed it one the same day before replying to my post. > > > Site owner said this (domain munged to protect the guilty) ... > It was Craig Oldfield. > <quote> > The bods at SMF checked out my site and spotted that instead of > http://www.deleted.co.uk/sanctuary/ http://www.craigoldfield.co.uk/sanctuary > it was > http://deleted.co.uk/sanctuary/ http://craigoldfield.co.uk/sanctuary > so bypassing what should have been the normal start page. A quick change > in the settings and job done. Certainly kudos to them for checking it > out so quickly and being very gentle in pointing out a user error. don't > know why it didn't show up in the last version though. > </quote> > > Not had the time to chase it up with the site owner yet but it looks > like he put http://domain not http://www.domain/ in a configuration > file. > > Still worth mentioning here though IMO as others may have done the same > especially if there's a bit of CNAMEing being done. > Or they are competent.
Technical Details
Message-ID:
<1167774197.999753.79210@k21g2000cwa.googlegroups.com>Path:
arc1-ca.pugleaf.net!g2news2.google.com!postnews.google.com!k21g2000cwa.googlegroups.com!not-for-mailReferences:
<7fHgYjDaRNjFFwA$@stuff-the-spammers.mx2.org.uk> <mF80Y1f3wTjFFwDF@molly.mockford> <a1PKC7R8ijlFFw2$@giggle2.pedtlan>Show Full Headers
Complete Article Headers
X-Google-Thread: f5cde,e9d75aecd6074791 X-Google-Thread: 1156f6,84608f65333be8f4,start X-Google-Attributes: gidf5cde,gid1156f6,public X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news2.google.com!postnews.google.com!k21g2000cwa.googlegroups.com!not-for-mail From: alan.messenger@hotmail.com Newsgroups: uk.net.web.authoring,demon.local Subject: Re: Login bug - SMF web forum Date: 2 Jan 2007 13:43:18 -0800 Organization: http://groups.google.com Lines: 56 Message-ID: <1167774197.999753.79210@k21g2000cwa.googlegroups.com> References: <7fHgYjDaRNjFFwA$@stuff-the-spammers.mx2.org.uk> <mF80Y1f3wTjFFwDF@molly.mockford> <a1PKC7R8ijlFFw2$@giggle2.pedtlan> NNTP-Posting-Host: 141.76.45.34 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" X-Trace: posting.google.com 1167774203 5424 127.0.0.1 (2 Jan 2007 21:43:23 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: Tue, 2 Jan 2007 21:43:23 +0000 (UTC) User-Agent: G2/1.0 X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1,gzip(gfe),gzip(gfe) X-HTTP-Via: 1.0 cache1:3128 (squid/2.6.STABLE5-20061208) Complaints-To: groups-abuse@google.com Injection-Info: k21g2000cwa.googlegroups.com; posting-host=141.76.45.34; posting-account=vYbroA0AAADB7y4OBbuVUJl4bE2EGrH-