Afrihost Security issue much like the COJ's

[DavidKinnes]

Guys has anyone noticed that Afrihost has the same security hole I've picked up a few random invoice by just changing the number?

 

[Celine]

really now.

 

[OMB]

Guys has anyone noticed that Afrihost has the same security hole I've picked up a few random invoice by just changing the number?

have you informed AfriMan? or anybody at AH?

 

[Fazda]

Contact Gian at Afrihost ASAP.

 

[Other Pineapple Smurf]

Really, I tried and I get a "Validation Failed"

 

[ShaunSA]

I must be a lousy hacker. I can't get the AH site to give me anything but my own stuff.

/goes off to slit wrists

 

[Paul Hjul]

Getting an Oops something went wrong on own invoices

I am quite sure that if there is a problem they are working on it and will make a release soon

 

[PsyWulf]

Really, I tried and I get a "Validation Failed"

+1

Trolls trolls everywhere

 

[MagicDude4Eva]

Now everyone take note: Incrementing a number in a URL requires sophisticated and mad hacking skills - not something a 4 year-old can do

 

[w1z4rd]

Now everyone take note: Incrementing a number in a URL requires sophisticated and mad hacking skills - not something a 4 year-old can do

Dude, ure too leet for us!

Btw + Respect for what you are doing. I know it is difficult (not the hacking, but standing up to the CoJ)

 

[froot]

+1

Trolls trolls everywhere

I did manage to reproduce it, but not with new invoices (on one try).
I have let Afrihost know, and they did get back to me asking for proof of such.

 

[Other Pineapple Smurf]

Now everyone take note: Incrementing a number in a URL requires sophisticated and mad hacking skills - not something a 4 year-old can do

Even us senior PHP devs admire the skill of these hackers. Its mind blowing what they know.

 

[MagicDude4Eva]

Dude, ure too leet for us!

Btw + Respect for what you are doing. I know it is difficult (not the hacking, but standing up to the CoJ)

And I have my COJ accounts in credit

 

[Grant]

Getting an Oops something went wrong on own invoices

I am quite sure that if there is a problem they are working on it and will make a release soon

haha
last time i saw "oops", i was "shopping" for more of their products.
page error popped up offered a 50% discount on ANY product purchased.

when i queried this, i was told it only applied to the "granny panties with yellow polka dots & blue stripes found on the 4th shelf in aisle number 34 during full moons in the month of february in alternate leap years"

pretty poor form