Go Back   PimpAndHost Support Forums - #1 Image Hosting & Editing Site on the web! > Support > Bugs

Bugs Please use this forum to report any bugs encountered, kindly provide screenshots, videos, and a detailed description of the problem, including steps taken to recreate it, so that we can effectively address the issue.

Reply
 
Thread Tools Display Modes
Old 02-14-2024   #1
VacantStare
Junior Member
 
Join Date: Oct 2023
Posts: 6
Thanks: 8
Thanked 1 Time in 1 Post
VacantStare is on a distinguished road
Default Catching routing errors

This is for someone who works on coding this site. Please check this out.

User profile actions use different controller routes, which is ok, but routing errors inside each controller are not properly controlled and this can cause vulnerabilities.

For example, following a simple MVC pattern:

/Vacantstare

Something like

/defaultController/indexAction($username)

It goes to my profile, album section.

/Vacantstare/

This is not correctly routed. It logically will try to fetch

/vacantstareController/indexAction

Which obviously doesn't exist. This request should throw a 404, page not found, but the error is not catched, and throws a 500 server error because it can't find the controller.

The user id in the profile actions goes through an url variable, in two flavors:

/u/userid

/username

And the actions that exist in one, go 500 in the other, instead of at least a 404.

Any questions welcome if I didn't explain myself properly.

Last edited by VacantStare; 02-19-2024 at 04:34 AM. Reason: 404, 404
VacantStare is online now   Reply With Quote
Old 02-17-2024   #2
VacantStare
Junior Member
 
Join Date: Oct 2023
Posts: 6
Thanks: 8
Thanked 1 Time in 1 Post
VacantStare is on a distinguished road
Default really?

Hello? 3 days? Nobody from the tech team?

Does anyone here know what SQL injection is?
VacantStare is online now   Reply With Quote
Old 02-18-2024   #3
pimp
Team Leader
 
pimp's Avatar
 
Join Date: Mar 2007
Posts: 2,635
Thanks: 119
Thanked 511 Times in 241 Posts
pimp will become famous soon enough
Default

Hello, Our guys will look into it if anything needs to be done it will be applied, thanks for your report
__________________

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
- Making sharing easy - The #1 image hosting platform since 2006
pimp is online now   Reply With Quote
The Following 2 Users Say Thank You to pimp For This Useful Post:
hepcat (02-18-2024), VacantStare (02-19-2024)
Old 02-19-2024   #4
VacantStare
Junior Member
 
Join Date: Oct 2023
Posts: 6
Thanks: 8
Thanked 1 Time in 1 Post
VacantStare is on a distinguished road
Default

I understand this issue is technical, and people want the site to have more features.

Let me be clear, pimp. Let's say I've been working on these things for quite a long time.

The underlaying application that makes this entire site work is badly designed, badly implemented and not tested at all. It plainly crashes the server in which it is running. It shouldn't even be in production.

Without any more info, as I can't read the server logs, it could be a critical bug. And "your guys" are not reading those logs either, probably because the app runs on an outsourced server noone oversees.

Thanks for the answer. Hope it is not a big issue.
VacantStare is online now   Reply With Quote
The Following User Says Thank You to VacantStare For This Useful Post:
pimp (02-19-2024)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 07:37 AM.

(c) www.Pimpandhost.com Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, vBulletin Solutions Inc.