Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | ... | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | ... | 36
BDFL - Memuneh
58769 posts

Uber Geek
+1 received by user: 10169

Administrator
Trusted
Geekzone
Subscriber

  Reply # 694164 1-Oct-2012 13:28
Send private message

DoggNZ: Hmmm...Apostrophe's (and all other punctuation) disappear when you type them in the search box now. What about if I wanted to search for say...Lost at Sea by Bryan Lee O'Malley ? Does Wheedle hate the Irish??


There are suspicions that it's to sanitise input data to prevent SQL Injections - done on the client side O_o...

Read my blog for some bad security scenarios.





Tel69
251 posts

Ultimate Geek
+1 received by user: 4

Trusted
Subscriber

  Reply # 694165 1-Oct-2012 13:33
Send private message

And their current implementation of it client side (because it is based on keyup for the search box) is easily gotten around without any real hastle at all.

That search box is one of the most likely possibilities for SQL injection. There are a few others, but that search box is so simple.

 
 
 
 


437 posts

Ultimate Geek
+1 received by user: 9
Inactive user


  Reply # 694167 1-Oct-2012 13:34
Send private message

freitasm:
DoggNZ: Hmmm...Apostrophe's (and all other punctuation) disappear when you type them in the search box now. What about if I wanted to search for say...Lost at Sea by Bryan Lee O'Malley ? Does Wheedle hate the Irish??


There are suspicions that it's to sanitise input data to prevent SQL Injections - done on the client side O_o...

Read my blog for some bad security scenarios.



All aboard the failboat.

Have also found blacklisting doesn't work, you just get "Member not found"

14508 posts

Uber Geek
+1 received by user: 3615

Trusted
Subscriber

  Reply # 694168 1-Oct-2012 13:37
Send private message

I agree they haven't had the best start, and things look pretty rough, though apart from the security issues, they are things which can be resolved fairly quickly. Trademe hasn't had a perfect history either. I hope they get the issues sorted quickly, as it would be nice to have a decent NZ Owned auction site. The fee's increase on TM have me a little upset and so long as I can import my products from TM I'll stick with them a little while and see what happens. If TM wanted to kill them, they could do so, by reversing their decision to increase their fees and release a little spin to say they heard what people have said about the fee's increase and have decided to listen to their valued clients and they would be back in peoples good books mostly.



BDFL - Memuneh
58769 posts

Uber Geek
+1 received by user: 10169

Administrator
Trusted
Geekzone
Subscriber

  Reply # 694169 1-Oct-2012 13:38
Send private message

I hope they fix the security issue, or put our minds at ease. Other than this, problems with page layout, colours, all this can be sorted in time.





3872 posts

Uber Geek
+1 received by user: 159


  Reply # 694171 1-Oct-2012 13:40
Send private message

http://www.wheedle.co.nz/Search/ItemDetails?id=3608

The action doesn't appear in the 'other' list...

http://www.wheedle.co.nz/Search/List?Category=131&Level=2

So if this action doesn't appear in the list, then what others also don't?

There's also talk about how it's only $1 to list...  yet on TM it's only 55c to list.  Yes, you pay when you sell, but what if you want to list two dozen products knowing that many won't sell?

Are people realistically going to spend money to list products if they're not going to sell?

Are people going to bother listing if their listings just don't show up in the listings?






Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz


437 posts

Ultimate Geek
+1 received by user: 9
Inactive user


  Reply # 694172 1-Oct-2012 13:44
Send private message

DonGould: http://www.wheedle.co.nz/Search/ItemDetails?id=3608

Are people going to bother listing if their listings just don't show up in the listings?




66 posts

Master Geek


  Reply # 694173 1-Oct-2012 13:44
Send private message

So, I was waiting for my photos to load for my trade for the past hour or so. Nothing showing, although it appeared they were uploading. I assumed Wheedle were vetting them but this was taking too long.
I was using Firefox so switched to Explorer. This worked and I now have photos. It was not completely successful as the photos didn't list/display as they loaded - just delete icons displaying in mid-screen as each loaded - presumably to delete a photo not displayed but there somewhere. According to the instructions I should have been able to tick the main pic but this did not happen.
So, Wheedle don't seem to have tested this with Firefox. And Explorer is not quite working correctly but does at least load photos.
My only big complaint so far - apart from the security issues mentioned above which may yet prove to be serious. Oh, I am a little concerned about the non-vetting of photos by new users - could be nasty.



2385 posts

Uber Geek
+1 received by user: 286
Inactive user


  Reply # 694174 1-Oct-2012 13:45
Send private message

Can't seem to log in anymore. Maybe they have suspended my account

xpd

Geek,gamer,father
8201 posts

Uber Geek
+1 received by user: 1073

Mod Emeritus
Trusted
Subscriber

  Reply # 694175 1-Oct-2012 13:47
Send private message

Yup same here... login server died ? 39/40 servers 404'ed ?




XPD / @DemiseNZ / Gavin
 
Corsair Carbide SPEC-02 / Corsair VS550 / G.SKILL Ripjaws X 8GB / Zotac 760GTX AMP! / ASUS H81M-E / Intel Pentium K Anniversay G3258 @3.9Ghz

 

Logitech G400S Mouse / SteelSeries Apex Raw Keyboard / Logitech G933 Headphones / Samsung S23C300L Monitor / Zalman Z-Machine Mouse Mat

 

Internet provided by : Voyager - VDSL 65/28  -  Musical Support by : Like A Storm - Visual Entertainment by : Plex and Steam and Overwatch


BDFL - Memuneh
58769 posts

Uber Geek
+1 received by user: 10169

Administrator
Trusted
Geekzone
Subscriber

  Reply # 694176 1-Oct-2012 13:48
Send private message


2385 posts

Uber Geek
+1 received by user: 286
Inactive user


  Reply # 694177 1-Oct-2012 13:49
Send private message

I think we have a fly on the wall in this thread :-P

437 posts

Ultimate Geek
+1 received by user: 9
Inactive user


Reply # 694178 1-Oct-2012 13:50
Send private message

Bit of unscheduled maintenance perhaps......

14508 posts

Uber Geek
+1 received by user: 3615

Trusted
Subscriber

  Reply # 694179 1-Oct-2012 13:51
Send private message

BraaiGuy: I think we have a fly on the wall in this thread :-P




Good, anything that makes the site better is good! 

490 posts

Ultimate Geek
+1 received by user: 6


  Reply # 694180 1-Oct-2012 13:51
Send private message

DonGould: http://www.wheedle.co.nz/Search/ItemDetails?id=3608

The action doesn't appear in the 'other' list...

http://www.wheedle.co.nz/Search/List?Category=131&Level=2

So if this action doesn't appear in the list, then what others also don't?

There's also talk about how it's only $1 to list...  yet on TM it's only 55c to list.  Yes, you pay when you sell, but what if you want to list two dozen products knowing that many won't sell?

Are people realistically going to spend money to list products if they're not going to sell?

Are people going to bother listing if their listings just don't show up in the listings?




General items
  • List your ad for free
  • Fee - $1 (only when your item has sold for over $20)
  • Up to 10 photos and video option
  • Until sold or withdrawn
  • Auction duration 1 - 14 days
  • $1 payment is deducted from members account when the item has sold
  • Withdrawing an auction before the scheduled finish time will incur a cancellation charge of $3

1 | ... | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | ... | 36
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Intel unveils the 8th Gen Intel Core Processor family for desktop
Posted 25-Sep-2017 19:45


Chow brothers plan to invest NZ$100 million in technology
Posted 24-Sep-2017 16:24


Symantec protects data everywhere with Information Centric Security
Posted 21-Sep-2017 15:33


FUJIFILM introduces X-E3 mirrorless camera with wireless connectivity
Posted 18-Sep-2017 13:53


Vodafone announces new plans with bigger data bundles
Posted 15-Sep-2017 10:51


Skinny launches phone with support for te reo Maori
Posted 14-Sep-2017 08:39


If Vodafone dropping mail worries you, you’re doing online wrong
Posted 11-Sep-2017 13:54


Vodafone New Zealand deploy live 400 gigabit system
Posted 11-Sep-2017 11:07


OPPO camera phones now available at PB Tech
Posted 11-Sep-2017 09:56


Norton Wi-Fi Privacy — Easy, flawed VPN
Posted 11-Sep-2017 09:48


Lenovo reveals new ThinkPad A Series
Posted 8-Sep-2017 14:37


Huawei passes Apple for the first time to capture the second spot globally
Posted 8-Sep-2017 10:45


Vodafone initiative enhances te reo Maori pronunciation on Google Maps
Posted 8-Sep-2017 10:40


Voyager Internet expand local internet phone services company with Conversant acquisition
Posted 6-Sep-2017 18:27


NOW Expands in to Tauranga
Posted 5-Sep-2017 18:16



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.