[beta site] Please can you broke this ?

[DanSteph]

Updated , I locked completely the entry now only:
"A-Za-z0-9éèàüöäê_@-" are allowed

No hack possible from this way. try another one

Notice the input value are controlled the same, no url hack possible.

Dan



Post Edited ( 05-14-04 19:45 )

[Krytom]

freespace2dotcom wrote:

But now I'm realizing that the world is a huge place, and I need to start getting smart or else I'll just be average.

And who wants to be average? we all want to excel!

Ah, but if everyone was smart, the average would change so that everyone would be average. I can pick out several
people in my class who I think will get average or less. Not me. I excel in music and maths and science (aren't I
modest). Music is my life, that's why I have the final audition for a music scholarsip in a week. Orbiter is a hobby, just
like it is for Dr.Martin.

[freespace2dotcom]

I don't want evverybody to be smart. If somebody is, then good for them, but *I* want to be really smart~!

It's merely human nature to want to excel, but not everybody does anyway.

[DanSteph]

No defacing yet ? no intrusion as admin ?

Well I'll assume it's enough secure for the contain it will have.

Dan



Post Edited ( 05-16-04 20:29 )

[UAF_Lt_Brenton]

ok then, one thing.  This d etc... is NOT MD5 code.  I have a little program called MDCrack that is supposed to
crack MD5 hashes.  And it doesn't accept it.  What is it really hashed in???

[DanSteph]

UAF_Lt_Brenton wrote:
ok then, one thing.  This d etc... is NOT MD5 code.  I have a little program called MDCrack that is supposed
to
crack MD5 hashes.  And it doesn't accept it.  What is it really hashed in???

Of course not it's pure html  caractere code, a litle trick to make your name "appear" like another
this isn't really an intrusion but it's true you can p* someone with that. (if he don't have access
to the database) Anyway this trick is disabled in the reviewer you can't use it anymore.

You will never hace acces to md5 password unless you have already acces to the database
(wich will need that you crack the password etc. etc. )

When you enter your pass it's translated in MD5 and compared to the one
in the database that is already in MD5 (this is why we can't send you your old password, we don't see it),
so even you can crack md5 it will be totally useless for you because you don't inject directly md5.

Anyway I'm suprised that md5 can be cracked, try this one:

5014c5cc9eb9f4cf84541f39c1803e33

you should retrieve a plain text of course.

Dan



Post Edited ( 05-18-04 21:34 )

[Krytom]

What is the point in all this security? Sure it wouldn't hurt to have it a nice secure database, but is there a reason?

[DanSteph]

Krytom wrote:
What is the point in all this security? Sure it wouldn't hurt to have it a nice secure database, but is there a reason?

Sure , it's the first time I create a site with a security part, even I've read a lot about
it I wanted to be sure that it's well done.

And last but not least my main intterest doing a "orbiter review" site is coding it
as for the DGIII I often make things because I find the coding intteresting and challenging.

I've added last night the "I've lost my password, send me a new one" with the robot
that send you a new password.

If you want to try it register and enter a valid e-mail then in the login form
click on "lost your password", the mail robot will answer you with a new password.

Dan

[freespace2dotcom]

Krytom wrote:
What is the point in all this security? Sure it wouldn't hurt to have it a nice secure database, but is there a reason?

It in the interests of protecting our "Rights to free Posts" and, um....

no, that's not right...

It's to keep us in place so that whenever mcbrain makes another GUPT, he can be banned for a few weeks.

And Dan plans to take over the worl-.....


*message truncated by Danbot 2000 due to suspicious content*

[DanSteph]

freespace2dotcom wrote:
And Dan plans to take over the worl-.....
*message truncated by Danbot 2000 due to suspicious content*

LOL

Anyway on the security subject the good question is: when you sleep
do you leave your house's door open ?

Howewer I agree It could be fun without security with other guy editing your review:

Review of Orbiter by freespace2dotcom

This game really suck to the death, the anim is crappy, the model are basic etc etc...


Prepare for spamming

Dan



Post Edited ( 05-20-04 05:49 )

[freespace2dotcom]

DanSteph wrote:
Review of Orbiter by freespace2dotcom
This game really suck to the death, the anim is crappy, the model are basic etc etc...
Dan

What about it? Chances are I actually *would* write something like that. only, it would be in another context, like:

The "idiot repellant" review

Man, Orbiter sucks seriously! don't waste your time on it! You know there's this game where you can blast the HEAD
off of alien mutant zombies! can you do this with orbiter? no. rules of logic dicate that unless there's sheer amounts
of blood, violence, and sex, A video game has no redeeming qualities and will not be played by anyone but the most
nerdy of our planet's population, such as those with poor eyesight and must wear GLASSES! Take a look at "tomb
raider." that game was the shiznik! not only could you kill lots of grotti things, but you did it with a totally sexy chick!
(polls indicate that it was because of the main character that made anybody bother playing it.)  Now look at this.

http://www.cduniverse.com/productinfo.asp?pid=1158617&cart=189577448&style=GAMES

Teletubbies? educational game? you couldn't PAY me money to take that game, and evidently everybody agrees with
me because the store dropped the price so low, that it's practially stealing. Believe you me, even stealing that game
is not worth the effort. It's not even worth the space on the cd it takes. Orbiter is also "educational" so clearly it
would be as popular if it went commercial. now then, now to the details. Orbiter has ships. you can spend about 5
minute getting one into an orbit, another five getting down, and then you repeat the process. Now fans of the thing
will tell you that there's more to it than that, but let me tell you, even if you wanna go to another planet,(and you
won't, because there's no aliens to kill) you probably can't because it's way too hard for the average player, only
aforementioned "nerds" could possibly do it. And even if you could, it takes so long that even if you speed up time,
you'll die of boredom long before you arrive. going to most planets require several hours of just sitting at your
computer screen actually doing nothing.

Now on to the graphics. there're no laser effects, not anything, in fact even the "best" ship you can get, (the "DG3")
is merely a different version of a ship YOU ALL READY HAVE! The only differnce is that it's more complex, but that just
means that you won't be able to use it, not that you'd be able to use the default "DG" that you get. Oh, sure there's
animations, "wow, that landing gear goes down so realistically!" is that the kinda thing you're interested in? I didn't
think so. there are others, but just repeat what I just said with "antenna dish" and "radiator"

So to close, just don't screw with orbiter, you'll only regret it when you can't install it because there's NOT EVEN AN
INSTALLER for it! you're better off with Grand theft auto, trust me.

whaddya think, dan? I think that's pretty clever if I do say so myself.



Post Edited ( 05-20-04 07:43 )

[DanSteph]

freespace2dotcom wrote:
(the "DG3")
is merely a different version of a ship YOU ALL READY HAVE! The only differnce is that it's more complex, but that just
means that you won't be able to use it.

LOL, that the best review I'v read so far... anyway to get back to the security
subject, without it someone would be able to edit your review and say instead :

"wow this game rock, the effects are wonderful... etc etc"

Would you really take the risk to appear as a smart guy ?

Dan



Post Edited ( 05-20-04 08:28 )

[freespace2dotcom]

I know what you're getting at, and I'm just being me, so go along and do what you wish, I see no harm at it, I'm
just being funny.

carry on.



Post Edited ( 05-20-04 10:08 )

[DanSteph]

You are the pepper of this forum, food is good also without it
but it would always miss a bit something.

Dan

[freespace2dotcom]

Aw...

*getting teary eyed*

Thanks dan!


(Although, I prefer to think of myself as salt, because it just so happens to be my favorite of the spices.)

[DocHoliday]

mhhh hwahahahaha

God, what a funny way to stop the days work. Thanks guys, I can go home now

Cheers,

[Krytom]

If Freespace is the pepper (or salt), then I'm the HP sauce (a type of british brown sauce if you don't know).

[DanSteph]

Krytom wrote:
If Freespace is the pepper (or salt), then I'm the HP sauce (a type of british brown sauce if you don't know).

Ah well don't fight gentlemen, there is enough space for everyone
and several ranks are unclaimed yet:

ognon,
salt,
meat,
ketchup,
mongo shutney,
strawberry,
cream,
potatoes (this one isn't very demanded, I wonder why )

Claim your rank immediatelly, phone 555-435-234

Dan

[Atom]

I'm the icing on the forum.