View Issue Details

IDProjectCategoryView StatusLast Update
0000554HTML & PERLBug Report - Interfacepublic2006-12-24 09:29
Reporterspider0042 Assigned Toepoximator  
PrioritynormalSeverityminorReproducibilityalways
Status resolvedResolutionfixed 
Product Version 
Target VersionFixed in Version 
Summary0000554: Guest Password Access - URLs missing pass= param
Description[Problem]
When using a Guest Password to Access the 'list votes' or 'show history' pages, the URLs on these pages are missing the 'pass=' parameter.
(The pass= param is not being 'carried over')

[Result]
Redirect to 'ERROR:2 - ACCESS DENIED'

[Solution]
Manually adding &pass=GUEST_PASSWORD to URLs that access private data allows access, but the links on the now accessible page are still missing the parameter.
 
The parameter is not being 'carried over'.

I am assuming the same perl script/code is generating these pages for both Guests and Members, thus the pass= param cannot simply be appended to the links.


[Details]
I have found this to be an issue on the 'list votes' and 'show history' pages.

*Problem exists for ALL links to private data.*
(ie. Links on the 'list votes' and 'show history' pages.)

A list of the problematic links can be found in the 'Additional Information'

-An Example:
 The 'list votes' page can be accessed.
 The links to private data on that page need the pass param.
 (ex: The 'tmp. anime' URL below needs &pass=)
http://anidb.info/perl-bin/animedb.pl?show=myvotes&uid=137427&do=animetmp

(As stated, a comprehensive list of problematic links can be found in the 'Additional Information' Section)


[Personal Comment]
Again, I have mentioned a few 'obvious' details/explanations, but I did this in hopes that it will clarify the solution enough that the task can be assigned to someone that may not be familiar with that section of the site. (Not that I am familiar with it, but I wanted to give a reasonably educated guess/troubleshooting_path to get the solution started.) :/ I'm just going to keep 'believing' that extra info wasn't more energy then just fixing it to begin with ^_^;
Additional Information[Useful References]
(These use my list as an example)

Access to MyList using passwords:
http://anidb.info/perl-bin/animedb.pl?show=mylist&uid=137427&pass=showme

list votes link
http://anidb.info/perl-bin/animedb.pl?show=myvotes&uid=137427&pass=showme

show history link
http://anidb.info/perl-bin/animedb.pl?show=myhistory&uid=137427&pass=showme


[List of Problematic Links]

-On list votes page
    * anime | tmp. anime | group | episode | animegroup | review
    * hide hentai - show only hentai
    * All links for Sorting/OrderBy

-On show history page
    * added | watched | stored | deleted
    * by week (at bottom)


------------------------

Otherwise, ALL sorting (and any combination of links) for the main MyList page is OK.

I have not made any reviews, but a password probably isn't required to access 'list reviews'.

I have NOT tested 'compare mylists' (that may-or-may-not be an issue). (I have to be logged in to do so, and I 'cannot compare my own list'.)
If it would be more convenient, anyone working on this can use mine for testing. (The link/pass can be found in the references at the top of this section.)
TagsNo tags attached.

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2006-12-21 13:37 spider0042 New Issue
2006-12-21 14:35 epoximator Status new => assigned
2006-12-21 14:35 epoximator Assigned To => epoximator
2006-12-24 09:29 epoximator Status assigned => resolved
2006-12-24 09:29 epoximator Resolution open => fixed