comp.lang.idl-pvwave archive: archive » Re: RSINC web mini-bug ??

Home » Public Forums » archive » Re: RSINC web mini-bug ??

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

Re: RSINC web mini-bug ?? [message #48078 is a reply to message #48074]

Mon, 20 March 2006 12:01

Michael Wallace
Messages: 409
Registered: December 2003

Senior Member

> http://www.google.com/url?sa=t&ct=res&cd=3&url=h ttp%3A//www.rsinc.com/services/techtip.asp%3Fttid%3D3528%26w id%3D2861072%26s%3D1497&ei=BHoaRI7ZPI7iiALs5fnXAw&si g2=ofQoPF4gqPb9_SDkfVlNYA
>
>
> Why is it interesting??
> I suppose because you are semi-login as:
>
>>> Hello Andrzej Pindor
>
> My name is not Andrzej Pindor, but can be logged as him for a moments. I
> suposse it is not a serious bug, because a bad boy needs to be the
> cookies of Andrzej with some kind of information to login as him 100%.

The name being shown is directly related to the wid number in the URL.
If you change the value of wid, you'll either get a different name or
the standard request to sign in. I don't understand why RSI has that
field in the URL (rather than only keeping it in a user's session), but
it appears to only affect the displayed name; you're not actually logged
in as that person. However, it is something that should be cleaned up
in my opinion.

-Mike

Report message to a moderator

[Message index]

		Re: RSINC web mini-bug ?? By: Antonio Santiago on Tue, 21 March 2006 09:03
		Re: RSINC web mini-bug ?? By: Jean[1] on Mon, 20 March 2006 12:11
		Re: RSINC web mini-bug ?? By: Michael Wallace on Mon, 20 March 2006 12:01

Previous Topic:	Re: Database vs. File Parsing
Next Topic:	Re: keyword_set([0])

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

] [

]

Current Time: Sat Oct 11 04:03:54 PDT 2025

Total time taken to generate the page: 1.28239 seconds