F5 bug NOT FIXED!

[Janglur]

http://forums.furaffinity.net/threads/107731-F5-Exploit-Resolved

This particular closed post claims the bug is fixed. Weellll:

http://www.furaffinity.net/user/janglur/


Clearly not. I can spam myself with impunity!


So, thusly:

http://youtu.be/1Isjgc0oX0s

 

[ArielMT]

So, um, how did you manage to do that? Because I tried to do that several times before saying the bug was fixed.

I tried to do it again on my own user page just seconds before posting this reply, and absolutely nothing was posted when I hit F5.

 

[LizardKing]

I can spam myself with impunity!

But did you do it by just pressing F5 repeatedly? The fix does nothing to stop you spamming yourself or others, only to stop it being done in that way.

 

[Stratelier]

The fix does not stop you from hitting the Back button and resubmitting -- it only stops you from hitting F5 after submitting.

 

[ArielMT]

The fix does not stop you from hitting the Back button and resubmitting -- it only stops you from hitting F5 after submitting.

If this is the case OP means -- flooding shouts without even touching the F5 key or reload/refresh button, then it's clearly not the same bug, and it's disingenuous and an insult to any programmer's intelligence to say it is. ESR's How To Ask Questions The Smart Way ought to be required reading, and a lot of it applies to making intelligent bug reports.

 

[Corto]

I won't lie, I've been attempting to use this on all of the staff's main site pages every single day and it won't really work.

 

[Iovis]

If they wanted to stop this they could make it so you need to wait a few minutes before leaving another shout in the same page, and if they exceed a certain number of shouts in a short period of time then they get temporarily "muted".

 

[ArielMT]

I wonder if OP filed a ticket regarding this "bug" and if he'd be kind enough to let us know. If a ticket was filed, then I hope it's not as absently described and misleading as this thread's opening post, or no wonder nothing was done about it.

The fix does not stop you from hitting the Back button and resubmitting -- it only stops you from hitting F5 after submitting.

This trick does not work with Firefox, Opera, or Internet Exploder. Going back one page after posting a shout to my user page took me to the page in my browsing history immediately prior to viewing my user page, not to the page from which my shout was posted, in all three browsers.

 

[Stratelier]

I meant hitting the Back button, browser pre-fills the form and you resubmit manually.

 

[ArielMT]

I meant hitting the Back button, browser pre-fills the form and you resubmit manually.

That's what I tried to do with the three browsers I mentioned to go back just one page. I also tried using Alt+Left, which should do the same thing.

 

[timoran]

Honest to goodness flood control is more complicated than redirecting the landing page.

I think the site coder's efforts would be better invested in solving this problem in the new user interface that's coming out This Summer instead of solving it on the old user interface...

 

[LizardKing]

I think the site coder's efforts would be better invested in solving this problem in the new user interface that's coming out This Summer instead of solving it on the old user interface...

Score:4, Funny

 

[Ricky]

1.) this IS NOT a bug. It's a matter of security/best practices

2.) I don't even understand what the fucking problem is.

Firefox warns you that you are about to resubmit data (or any other browser). If people are spamming shouts, etc. put a THROTTLE on it.

(see: dateDiff() )

 

[SnowFox]

Score:4, Funny

It'll be even funnier when we're saying "The new interface that's coming out last summer"

Maybe the new coders are actually neutrinos. There's still time.


To be honest I'd rather we keep the old codebase for as long as possible. It's far more fun that way.