bug in this forum

[freddydoesphp]

Just thought someone who runs this forum might want to know that if you make a link in a post like yahoo.com it will try to go to http://www.sitepointforums.com/yahoo.com

Not sure if you have done this on purpose but I think a simple ereg function could take care of it.

[prequel]

strange

http://www.yahoo.com
yahoo.com
http://yahoo.com

[qslack]

What if I linked to Command.com for someone who lost theirs and it turned it into a http://command.com/ link? I guess that's not going to be what usually happens but it's generally good to use http:// so you get in the habit of doing it.

P.S. Another bug: if you edit it, the edit time is not in your local timezone as specified in your profile.

[diacono]

now that you mention bugs...

i posted something with some php code, then i did a preview and the code was executed!!!!

the code was there but after that was the actual code executed!!

<hmmm...> does that mean i could....



here's the thread

[freddydoesphp]

diacono could you please explain what you mean?

[Karl]

Well I have just tried entering PHP code and previewing it and as I though, and you can see, it hasn't executed.

<?php

echo "Karl's Test";

?>

[PeterW]

It may have looked like it but I dont expect so..

1. I think all "<" get converted to &lt;
2. The posts are stored in a database; so unless a PHP eval() was used, it would be hard

of course, it may have just been a freak of nature and you my have been able to do something bad ..

[diacono]

actually i didnt pay much atention when it happened. it wasnt till later that i realised.

i've tried it again and it still works!!

just put this as code in a thread

<?

function check_stat($uin) {
	 $arr = @file("http://wwp.icq.com/scripts/online.dll?icq=$uin&img=1");
	 $len = strlen($arr[1]);
	 if ($len == "") return "1";
	 if ($len == 96) return "2";
	 if ($len == 83) return "3";
	 if ($len == 1) return "4";
}

switch ($task) {

case 'lookup':
	if (check_stat($uin)=="1" OR "2"){
	?>
		<form action="<? print $PHP_SELF ?>" method="post">

		<b>The ICQ Online-Message Panel</b><br><br>

		<b>Sender Name</b> (optional):<br>
		<input type="text" name="from" value="" size=15 maxlength=40><br>
		<b>Sender EMail</b> (optional):<br>
		<input type="text" name="fromemail" value="" size=15 maxlength=40><br>
		
		<input type="hidden" name="subject" value="PHP ICQ Jobbler!">
		
		Message:<br>
		<textarea name="body" rows="3" cols="30" wrap="Virtual"></textarea>

		<input type="hidden" name="to" value="<? print $uin; ?>">
		<input type="hidden" name="task" value="send">
		<input type="submit" name="Send" value="Send Message">  
		<input type="reset" value="Clear">
		</form>
	<?} else {
	?>
		Moose!	
	<?}
break;

case 'send':
	mail($to . "@pager.icq.com", "$subject", "$body", "Return-path:$fromemail\nFrom: $from");
	print "emailto:" . $to . "@pager.icq.com<br><br>\n\n";
	print "subject:" . $subject . "<br><br>\n\n";
	print "body:" . $body . "<br><br>\n\n";
break;

default:
?>

<h1>ICQ Jobbler!</h1>
<form method="post" action="<? print $PHP_SELF; ?>">
<input type="text" name="uin">

<input type="hidden" name="task" value="lookup">
<input type="submit" value="Check that number!">
</form>

<?
break;
}

and then do a preview...
hte code gets executed!!

[Son Nguyen]

Sounds interesting. I tested it.
But it's not the problem of PHP, but rather the problem of HTML <textarea> tag, it breaks out when seeing HTML code.

If such a problem happens with vB/php, the servers/data are all gone long ago!!!

[freddydoesphp]

123finder, why did you change your name?

[Son Nguyen]

New year, new name
And that is my real name. Probably also because I have to keep away from spending too much time @SPF like I did!
Anyway, you will help and get help from Son Nguyen!

[freddydoesphp]

Didn't think anybody could pronounce Vietnamese names did ya?

[Hierophant]

The code above sortof worked because of the way HTML was interpreted. When the browser read the </textarea> tag it was breaking.

If you link to another site using the URL tags, you need to use the format of [ URL="http://yahoo.com" ] within the opening tag or your browser will think it is part of the current site. Go try it on your own. Type in <a href="yahoo.com">Yahoo</a> in a page and click on it.
<Edited by W. Luke on 01-06-2001 at 05:44 PM>