Click here to Skip to main content
15,881,803 members

The Weird and The Wonderful

   

The Weird and The Wonderful forum is a place to post Coding Horrors, Worst Practices, and the occasional flash of brilliance.

We all come across code that simply boggles the mind. Lazy kludges, embarrassing mistakes, horrid workarounds and developers just not quite getting it. And then somedays we come across - or write - the truly sublime.

Post your Best, your worst, and your most interesting. But please - no programming questions . This forum is purely for amusement and discussions on code snippets. All actual programming questions will be removed.

 
GeneralRe: Alcatraz ~ the tourist website Pin
Andrei Straut13-Aug-12 4:59
Andrei Straut13-Aug-12 4:59 
GeneralRe: Alcatraz ~ the tourist website Pin
enhzflep13-Aug-12 5:14
enhzflep13-Aug-12 5:14 
GeneralRe: Alcatraz ~ the tourist website Pin
Andrei Straut13-Aug-12 5:51
Andrei Straut13-Aug-12 5:51 
JokeRe: Alcatraz ~ the tourist website Pin
AspDotNetDev13-Aug-12 5:50
protectorAspDotNetDev13-Aug-12 5:50 
GeneralRe: Alcatraz ~ the tourist website Pin
enhzflep13-Aug-12 6:12
enhzflep13-Aug-12 6:12 
GeneralRe: Alcatraz ~ the tourist website PinPopular
AspDotNetDev13-Aug-12 6:25
protectorAspDotNetDev13-Aug-12 6:25 
GeneralRe: Alcatraz ~ the tourist website Pin
enhzflep13-Aug-12 6:34
enhzflep13-Aug-12 6:34 
GeneralRe: Alcatraz ~ the tourist website Pin
Bernhard Hiller14-Aug-12 21:24
Bernhard Hiller14-Aug-12 21:24 
Even worse. It is open to SQL injection attacks. A few days ago, someone asked in Q&A how a "UNION SELECT ALL null..." attack works, and someone pointed to Evil SQL[^]. Just tried a https://www.alcatraztrips.com/Confirmation.asp?order=179000%20having%201=1--[^]
which results in
Microsoft OLE DB Provider for SQL Server error '80040e14'
Column 'orders.OrderNumber' is invalid in the select list because it is not contained in either an aggregate function or the GROUP BY clause.
/Confirmation.asp, line 13

and some more bad injections... So easy to get the name of their db user etc.
But: please do not destroy their web site, just have fun!
It is such a great place to demonstrate the vulnerabilities of badly written code to our students here at CP.
GeneralRe: Alcatraz ~ the tourist website Pin
Brisingr Aerowing15-Aug-12 15:03
professionalBrisingr Aerowing15-Aug-12 15:03 
GeneralConvertToReadableNumber PinPopular
Arpikusz8-Aug-12 21:57
Arpikusz8-Aug-12 21:57 
GeneralRe: ConvertToReadableNumber PinPopular
Shameel8-Aug-12 22:33
professionalShameel8-Aug-12 22:33 
GeneralRe: ConvertToReadableNumber PinPopular
J4amieC9-Aug-12 0:43
J4amieC9-Aug-12 0:43 
GeneralRe: ConvertToReadableNumber Pin
Brisingr Aerowing9-Aug-12 14:46
professionalBrisingr Aerowing9-Aug-12 14:46 
GeneralRe: ConvertToReadableNumber Pin
bojanh13-Aug-12 4:14
bojanh13-Aug-12 4:14 
GeneralRe: ConvertToReadableNumber Pin
Bernhard Hiller9-Aug-12 0:55
Bernhard Hiller9-Aug-12 0:55 
GeneralRe: ConvertToReadableNumber Pin
Eddy Vluggen9-Aug-12 1:06
professionalEddy Vluggen9-Aug-12 1:06 
GeneralRe: ConvertToReadableNumber Pin
Pete O'Hanlon9-Aug-12 1:47
mvePete O'Hanlon9-Aug-12 1:47 
JokeRe: ConvertToReadableNumber Pin
dan!sh 9-Aug-12 2:04
professional dan!sh 9-Aug-12 2:04 
GeneralRe: ConvertToReadableNumber Pin
all_in_flames13-Aug-12 5:24
professionalall_in_flames13-Aug-12 5:24 
GeneralRe: ConvertToReadableNumber Pin
JeremyBob13-Aug-12 3:17
JeremyBob13-Aug-12 3:17 
GeneralRe: ConvertToReadableNumber Pin
Wenff13-Aug-12 3:27
professionalWenff13-Aug-12 3:27 
GeneralRe: ConvertToReadableNumber Pin
Sasha Laurel13-Aug-12 5:14
Sasha Laurel13-Aug-12 5:14 
GeneralSecurity - You're doing it wrong! PinPopular
Andrei Straut8-Aug-12 3:56
Andrei Straut8-Aug-12 3:56 
GeneralRe: Security - You're doing it wrong! Pin
Brisingr Aerowing8-Aug-12 15:15
professionalBrisingr Aerowing8-Aug-12 15:15 
JokeRe: Security - You're doing it wrong! Pin
Bernhard Hiller8-Aug-12 21:42
Bernhard Hiller8-Aug-12 21:42 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.