|
Is it possible to generate digital signatures with the greasemonkey API? It would be nice to be able to detect if someone's spoofing or not..
If it is indeed possible, you could always stick the code into a <span style = "display: none">signature</span>, and then verify it on at the click of a button.
--
80 percent entertainment by volume
|
|
|
|
|
Javascript has its own crypto API (which i've never used and know nothing about), so i'd imagine it's possible.
Alternately, i could just make it slightly easier to view the user's profile from a message. It'd be pretty hard to spoof another user's ID or "member since" date.
|
|
|
|
|
Slightly less hardcore, but it would work. 
--
Secreted by the Comedy Bee
|
|
|
|
|
I've finally gotten off my butt to get some info about the problem. I went to my blog page and tried to create a new post with CPHog enabled and I got the same unexpected error that I've been getting creating any new post for a while now. The main difference I've seen is that CPHog seems to send an ArticlePassword of 3 instead of 379421473. I hate to just dump the request logs, but you might find this useful:
This time I fired up HttpLook to capture the session and this is what I saw:
#35 13:24:30.304 209.171.52.99:80
POST /script/comments/app/user_do_new.asp?forumid=18722&main=/script/comments/forums.asp HTTP/1.1
Host: www.codeproject.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,**;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Cookie: cat=3; Email=; LastVisit=7%2F27%2F2006+2%3A28%3A03+PM; loginkey=; MPP=50; exp1=5; datefilter=3; noise=1; ebNewBandWidth_.www.codeproject.com=202%3A1128096368418; LoungeTab=0; SessionGUID=%7BC7F8A5F9%2DD962%2D4982%2DB279%2DDD0F13CAFB2C%7D
Pragma: no-cache
Cache-Control: no-cache
#38 13:24:31.116 209.171.52.99:80
HTTP/1.1 200 OK
Date: Thu, 27 Jul 2006 18:28:26 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 10008
Content-Type: text/html
Set-Cookie: SessionGUID=%7BC7F8A5F9%2DD962%2D4982%2DB279%2DDD0F13CAFB2C%7D; path=/
Set-Cookie: cat=3; expires=Fri, 27-Jul-2007 04:00:00 GMT; path=/
Cache-control: private
[snip]
And this was the successful old school result
#39 13:26:35.414 209.171.52.99:80
POST /script/comments/app/user_do_new.asp?id=178544&main=/script/profile/whos_who.asp&df=100&forumid=18722&noise=1&exp=6&mpp=50 HTTP/1.1
Host: www.codeproject.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*
I can imagine the sinking feeling one would have after ordering my book,
only to find a laughably ridiculous theory with demented logic once the book arrives - Mark McCutcheon
|
|
|
|
|
Nice bug report, Andy! 
The problem was caused by CPhog not picking up the changes you made to your login email. I've updated the script to pull this every time CPhog loads, which should eliminate this problem... hopefully it doesn't slow anything down (let's see how asynchronous this AJAX thing really is...  )
Pull the latest script from the link in my sig, refresh CP, all should be well. (alternately, if you're using the trunk version, just pull the latest from... uh, whatever that URL is - i updated both).
|
|
|
|
|
Man I feel like a luser. That should have been freaking obvious to me. If you see this post then it is working now.
Using the GridView is like trying to explain to someone else how to move a third person's hands in order to tie your shoelaces for you.
-Chris Maunder
|
|
|
|
|
I can see your hog! Hallelujah!
--
Behold, for I am THE CORRUPTOR!
|
|
|
|
|
Andy Brummer wrote: If you see this post then it is working now.
|
|
|
|
|
Some of you may have noticed sigs now get wrapped in <div class="ForumSig">...</div> tags. This serves 2 purposes:
1. We can mess around with people's sigs. Clip them, make them invisible, make 'em yellow. Whatever.
2. I can split the message and sig in the "modify message" page.
I'm guessing this may give you some ideas for CPHog...
cheers,
Chris Maunder
CodeProject.com : C++ MVP
|
|
|
|
|
Threw a few things into the trunk this evening. Nothing major, but possibly something worth commenting on before i merge 'em into the live branch:
- Empty signatures now display placeholder text
- Clicking the collapsed signature line expands it and opens it for editing.
- The emoticon menu shortcut key (Ctrl+E) now actually does something
- Speaking of formatting menus, they've changed: font face, color and size, paragraph alignment, and emoticons now expand into the area below the formatting menu.
- A couple of other minor bug fixes related to quoting and replying.
|
|
|
|
|
About them tweaks. Would it be possible to generate a modification timestamp that is english only? It would seem that your script is using some date/time-formatting based on my computers locale settings. I'm not bothered by it, but it might bother others who aren't Swedish. After all, CP is english only.
[edit]See timestamp below:[/edit]
--
If not entertaining, write your congressmanLast modified: den 15 juli 2006 18:28:39 --
|
|
|
|
|
- modifying your messages will now work if you have HTML in your name
- replying to sticky threads won't work
- hijacking threads and messages should be plugged up.
- [modified] will be stripped from the subject line when you reply. However, this seems to be a bit hit and miss. It works fine everytime I test it but I'm still seeing [modified] appended to many replies. Is this a CPHog issue?
- email notifications will not be sent to members who have not confirmed their email addresses. We're sending too many bounces and bad emails which is threatening our white-list status.
- email notifications no longer contain the sender's email address and are sent using the name "CodeProject Forums" in the vain hope that people will stop hitting 'reply' in the email client (thus sending the response to me) and instead visit the forum to reply.
cheers,
Chris Maunder
CodeProject.com : C++ MVP
-- modified at 14:21 Wednesday 31st May, 2006
|
|
|
|
|
Chris Maunder wrote: It works fine everytime I test it but I'm still seeing [modified] appended to many replies. Is this a CPHog issue?
CPhog spells [modified] the same way CP does... but if you modify a post twice using CPhog, it'll change [modified] to [modified*n] (where n is the number of times modified). CPhog will still strip this when replying, but CP won't.
|
|
|
|
|
Whoa... I got this reply in my mailbox.
--
Coming Soon to an Illegal DVD
|
|
|
|
|
Nevermind! This is the "funky" message board.  
Man, am I on a roll today? First I forget what board this is, and then I reply to myself.
--
In Hypno-VisionLast modified: den 10 juli 2006 12:29:28 --
|
|
|
|
|
ya man, this is the important sh*t...
|
|
|
|
|
Hmm.. could the reply be an "off by one" error? Look who's the owner of the thread below...
--
-= Proudly Made on Earth =-
|
|
|
|
|
Bumped into the same weird rendering error again.1 I don't know if it's my setup that's wacko or not. Has anyone else seen this?
1 For those who don't know what I'm talking about: Sometimes, the thread entries are rendered in and below the bottom [First, Prev, Next]-links. Upon request, I can email a screenshot to those who are interested. Shog, David: It's the same misrendering as I mentioned before, so unless you've forgotten all about it, you don't need a new screenshot.
--
100% natural. No superstitious additives.
|
|
|
|
|
So when was the membership information added? Why did our testing miss it? I'm wondering how a public launch of something we've all been using a long time could cripple CPhog for so many people. What did we miss?
- Rex
If we all used the Plain English compiler every post in the lounge would be a programming question.
Welcome to CP in your language. Post the unicode version in My CP Blog [ ^ ] now.
People who don't understand how awesome Firefox is have never used CPhog. The act of using CPhog alone doesn't make Firefox cool. It opens your eyes to the possibilities and then you start looking for other things like CPhog and your eyes are suddenly open to all sorts of useful things all through Firefox. - (Self Quote)
|
|
|
|
|
I think what happened was, the code used a... "less-than-documented" feature of FF, and at some point it just stopped working. But the code was only used when the username and email weren't already stored, so it just didn't break if you'd already been using it.
That, or gnolls. 
|
|
|
|
|
Ahhh, okay. That really struck me odd. But those kind of bugs are hard to test. Next time around some of us should fake a profile registration and test using it to make sure we catch that stuff to. I suppose that's about the only condition not tested right?
If we all used the Plain English compiler every post in the lounge would be a programming question.
Welcome to CP in your language. Post the unicode version in My CP Blog [ ^ ] now.
People who don't understand how awesome Firefox is have never used CPhog. The act of using CPhog alone doesn't make Firefox cool. It opens your eyes to the possibilities and then you start looking for other things like CPhog and your eyes are suddenly open to all sorts of useful things all through Firefox. - (Self Quote)
|
|
|
|
|
The final touches have been made, all files are uploaded...
Lounge spamming begins at the crack of dawn whenever i wake up.
Thanks again for the help testing and honing this release!
----
|
|
|
|
|
So, has the 9 hours passed?
--
100% natural. No superstitious additives.
|
|
|
|
|
|
Do I have to uninstall the old script before I install the new? I just installed the script on your website, but it looks just like the beta I had installed earlier.
Perhaps, version 1.0.0.1 could include an about box, or equivalent?
--
100% natural. No superstitious additives.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
