Dave Larrington said:Thanks for that, Allen. A pair of PP337's is winging its way mewards. BTW, the url is
xpedia.co.ukxpedia.co.ukOpen ↗ (or xpedia.frogtrade.netxpedia.frogtrade.netOpen ↗)
What is it with these f*****g cycling websites. www.xpedia.com Konqueror - formatting is completely
screwed and the javascript (I think) is crashing the browser.
I.E. "You must enable cookies to put items in the shopping basket". Cookies ARE enabled. Netscape on
Linux. Get all the way through to the end and then "You must have java to buy anything."
Give up. Go to www.totalcycling.com.
Get through to "I am new. I have not shopped here before." Click on New.
"Microsoft OLE DB Provider for ODBC Drivers error '80040e14' [Microsoft][ODBC SQL Server Driver][SQL
Server]Line 1: Incorrect syntax near '='. /ssl_msuite/mz3Start_ssl.asp, line 20.
URL is secure.hiphip.commz3Start ssl.aspOpen ↗
Hmmm me things - looks like they are sending user supplied data through to the database. Lets just
try something.
secure.hiphip.commz3Start ssl.aspOpen ↗
uiteFlag=0
Ooops.
Microsoft OLE DB Provider for ODBC Drivers error '80040e14' [Microsoft][ODBC SQL Server Driver][SQL
Server]Invalid column name 'x'. /ssl_msuite/mz3Start_ssl.asp, line 20.
So we can insert our own SQL into the "Secure" server if we really want to.
Of course, attempting to go to secure.hiphop.comsecure.hiphop.comOpen ↗ in order to report their gaping security
hole just gives "Directory Listing Denied"
Hopeless. I'm not sure a post to (NT)bugtraq would help given the lack of contact details but it's
tempting. According to whois they are based in Miami. seamlesstech.com website doesn't seem to work
in konqueror (contact us doesn't seem to work) nor in Netscape on linux (Redirects from the home
page to a 404 with a link to www.microsoft.com)
(I'm assuming that hiphip.com is nothing to do with totalcycling.com and is just doing the CC
clearing for them. However the contact us page at totalcycling.com is just to get yourself added to
their mailing list)
Disgusted of Watford,
Tim.
--
God said, "div D = rho, div B = 0, curl E = - @B/@t, curl H = J + @D/@t," and there was light.
tjw.hn.orgtjw.hn.orgOpen ↗ locofungus.btinternet.co.uklocofungus.btinternet.co.ukOpen ↗