totseans.com/twoflower/

SlartibartfastSlartibartfast Global Moderator-__-
edited August 2012 in Spurious Generalities
I've nigger-rigged together an anonymous Blog. it's located at: http://www.totseans.com/twoflower/

Here's the "code": http://www.totseans.com/twoflower/twoflower.zip
It's embarrassingly bad.

Of course, I don't log anything but GoDaddy would keep track of access time and IPs. So keep it trivial and fun.

fixed, the blank title error.

Comments

  • DfgDfg Admin
    edited August 2012
    It should work with twoflower.totseans.com
    Let me check.
  • edited August 2012
    Well I tried some XSS type stuff mixed with Zalgo and some HTML (I was going to put a giant Div covering the whole screen if it worked) but it looks like my plan was foiled when nothing showed up after submission.

    Well played, Slart :D
  • Darth BeaverDarth Beaver Meine Ehre heißt Treue
    edited August 2012
    I am not a php head by any stretch but something is funny with the code. Every time you use an apostrophe "'" it displays a backslash "\" in front of the apostrophe like so; "Don\'t".
  • RemadERemadE Global Moderator
    edited August 2012
    Ah "nigger-rigged", one of my favourite terms. You, Sir, are a winner for today!
  • edited August 2012
    I am not a php head by any stretch but something is funny with the code. Every time you use an apostrophe "'" it displays a backslash "\" in front of the apostrophe like so; "Don\'t".

    That's escaping characters to stop the browser as parsing special characters in people's comments as HTML/PHP. It's a security feature, although it needs tweaking so that the output is sanitized and still output to the browser as normal text. I believe you can use the PHP function "htmlspecialchars" to do such a thing - http://php.net/manual/en/function.htmlspecialchars.php :thumbsup:
  • SlartibartfastSlartibartfast Global Moderator -__-
    edited August 2012
    it's actually a slightly more complex issue then that, I allow certain types of HTML tags (formatting and links), all those html entitity functions would break that.

    I'm not using a database so its more.challenging. I'll fix it soon.
  • Darth BeaverDarth Beaver Meine Ehre heißt Treue
    edited August 2012
    RemadE wrote: »
    Ah "nigger-rigged", one of my favourite terms. You, Sir, are a winner for today!

    Pardon me sir but the politically correct term would be Afro Engineered.
  • RemadERemadE Global Moderator
    edited August 2012
    Don't make me laugh! I still have stitches in.

    Ow..ouch..fuck you..lol
Sign In or Register to comment.