Comments on CSTutoringCenter

Thanks gizmore! I do apologize to everyone that this is how the login must work. This was implemented when I first started the site and had no clue about php just yet...Perhaps I can make the first part of the email address (before the @ sign) the username, pending any duplicates of course. Some food for thought.

Thanks to all who linked up and best to you all!

In my opinion i like to have the username equals the email, so you only need to remember your email, instead of your username _and_ your email in case you need a new password.
It all has pro`s and con`s

Of course, for wechall linking it is a bit unlucky.
I might add some default hide status for each site.

Until that you should hide your username for CSTutoringCenter after linking.

Little problem about computing solved challs and points.
I let a message to Alex about that and the reason I suppose to cause this bug.
For the first time of my life, TheHiveMind is behind me !
I'm gonna open another bottle of champagne to celebrate that great (and too short) moment

108/107 challs... Congratulation CommCom you're impressive...

Hm, I've sent him a bug report about this a few weeks ago - he answered and said it was fixed - obviously it's not.
Well, I've sent him another mail about this including a list of all multiple entries.
Hope it gets fixed soon

Quote from elasolova

yes, it worked

no, it doesn't
please check if it's actually working

--------------------------------------------
[edited]
yes, it works using my email as the username

Weakness:
http://www.cstutoringcenter.com/problems/problems.php?id=%3Cscript%3Ealert%28AdBrite_Background_Color%29%3C/script%3E

Might wanna, you know, fix that before someone finds something more nefarious.

mM

Also nice .
http://www.cstutoringcenter.com/problems/problems.php?id=%22%3E%3Ca%20href=javascript:alert%28document.cookie%29;%3Eaha%3C/a%3E

Good luck with it .

Quote from Cobruto

Also nice .
http://www.cstutoringcenter.com/problems/problems.php?id=%22%3E%3Ca%20href=javascript:alert%28document.cookie%29;%3Eaha%3C/a%3E

Good luck with it .

Well, you can do a LOT more than just that on that site ... I've mailed Alex about the above and a few other serious things a few weeks ago, no response yet (or it may have been filtered by my spamfilter ;-))...

I am not an expert in security and appreciate all the findings thus far. I do believe that I have fixed *most* of them, probably not all as any site will have its openings.

@busyr: check your spam, I have mailed you back about 3 days prior to this date on the message (Feb. 1).

Thanks all. I am uploading some more new challenges in the next day or 2 so stay tuned!