PDA

View Full Version : Baraban login bug


Ежик_В_Дурмане
9th December 2004, 17:40
Ive noticed this a while back.
Front page at http://www.baraban.com has two links to "New Discussion Forums" both pointing to http://www.baraban.org/go/?s=
In the attached screenshots Ive named them 1(the top one) and 2 (the one below 1).

So here is what I noticed, if you are a registered user that has logged in before and a cookie with your id was saved in your browser, you should be able to go back to baraban.com and not have to log in. Well, if you click on link 1, it will log you off and in fact even if you login after clicking on link 1 it will prompt your for username/password and every user-specific resource, like Control Panel, replying, etc. It completely screws up the loggin in process.

This will persist untill you click on link 2. In fact link 2 always works properly and should always be used in place of link 1. Which is weird because they both point to the same URL.

Ive tested this with both IE5, IE6 and mozilla 1.0

darkie
9th December 2004, 17:44
b-cos cookies tied up to the domain name
in our case "baraban.org"

program set just one cookie, and browser supplies it only if it goes to that domain

Ежик_В_Дурмане
9th December 2004, 17:47
that makes sense, this is easy to fix then.

cant attach the image btw

darkie
9th December 2004, 17:48
Автор оригинала: Ежик_В_Дурмане
that makes sense, this is easy to fix then.

cant attach the image btw lol
but there is nobody to fix it :D

Ежик_В_Дурмане
9th December 2004, 17:49
yep, i just verified, the top link is for baraban.com, the bottom one is for .org

Ежик_В_Дурмане
9th December 2004, 17:50
Автор оригинала: darkie
lol
but there is nobody to fix it :D

the web page runs itself?
Nobody ever hacked baraban?

darkie
9th December 2004, 17:50
Автор оригинала: Ежик_В_Дурмане


the web page runs itself?
Nobody ever hacked baraban? huh huh :o)
nobody is a nice name :cool:

GreenJazz
21st December 2004, 12:34
a YA OPYAT ZABANEN/.////D;F;LFJGHIOSDO;SDJFHIO;JO;G