Wheedle.co.nz: experiences, comments

To post in this sub-forum you must have made 100 posts or have Trust status or have completed our ID Verification

Forums › Startups › Wheedle.co.nz: experiences, comments

1 | ... | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | ... | 36

BDFL - Memuneh
76342 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#694164 1-Oct-2012 13:28

DoggNZ: Hmmm...Apostrophe's (and all other punctuation) disappear when you type them in the search box now. What about if I wanted to search for say...Lost at Sea by Bryan Lee O'Malley ? Does Wheedle hate the Irish??

There are suspicions that it's to sanitise input data to prevent SQL Injections - done on the client side O_o...

Read my blog for some bad security scenarios.

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

Backblaze

Backblaze Unlimited Backup. World’s easiest cloud backup. Get peace of mind knowing your files are backed up securely in the cloud (affiliate link).

Tel69

Tel69
261 posts

Ultimate Geek

Trusted

Lifetime subscriber

#694165 1-Oct-2012 13:33

And their current implementation of it client side (because it is based on keyup for the search box) is easily gotten around without any real hastle at all.

That search box is one of the most likely possibilities for SQL injection. There are a few others, but that search box is so simple.

DoggNZ

437 posts

Ultimate Geek
Inactive user

#694167 1-Oct-2012 13:34

freitasm:
DoggNZ: Hmmm...Apostrophe's (and all other punctuation) disappear when you type them in the search box now. What about if I wanted to search for say...Lost at Sea by Bryan Lee O'Malley ? Does Wheedle hate the Irish??

There are suspicions that it's to sanitise input data to prevent SQL Injections - done on the client side O_o...

Read my blog for some bad security scenarios.

All aboard the failboat.

Have also found blacklisting doesn't work, you just get "Member not found"

networkn

Networkn
30207 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#694168 1-Oct-2012 13:37

I agree they haven't had the best start, and things look pretty rough, though apart from the security issues, they are things which can be resolved fairly quickly. Trademe hasn't had a perfect history either. I hope they get the issues sorted quickly, as it would be nice to have a decent NZ Owned auction site. The fee's increase on TM have me a little upset and so long as I can import my products from TM I'll stick with them a little while and see what happens. If TM wanted to kill them, they could do so, by reversing their decision to increase their fees and release a little spin to say they heard what people have said about the fee's increase and have decided to listen to their valued clients and they would be back in peoples good books mostly.

freitasm

BDFL - Memuneh
76342 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#694169 1-Oct-2012 13:38

I hope they fix the security issue, or put our minds at ease. Other than this, problems with page layout, colours, all this can be sorted in time.

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

DonGould

3892 posts

Uber Geek

#694171 1-Oct-2012 13:40

http://www.wheedle.co.nz/Search/ItemDetails?id=3608

The action doesn't appear in the 'other' list...

http://www.wheedle.co.nz/Search/List?Category=131&Level=2

So if this action doesn't appear in the list, then what others also don't?

There's also talk about how it's only $1 to list... yet on TM it's only 55c to list. Yes, you pay when you sell, but what if you want to list two dozen products knowing that many won't sell?

Are people realistically going to spend money to list products if they're not going to sell?

Are people going to bother listing if their listings just don't show up in the listings?

Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz

DoggNZ

437 posts

Ultimate Geek
Inactive user

#694172 1-Oct-2012 13:44

DonGould: http://www.wheedle.co.nz/Search/ItemDetails?id=3608

Are people going to bother listing if their listings just don't show up in the listings?

rubygirl

67 posts

Master Geek

#694173 1-Oct-2012 13:44

So, I was waiting for my photos to load for my trade for the past hour or so. Nothing showing, although it appeared they were uploading. I assumed Wheedle were vetting them but this was taking too long.
I was using Firefox so switched to Explorer. This worked and I now have photos. It was not completely successful as the photos didn't list/display as they loaded - just delete icons displaying in mid-screen as each loaded - presumably to delete a photo not displayed but there somewhere. According to the instructions I should have been able to tick the main pic but this did not happen.
So, Wheedle don't seem to have tested this with Firefox. And Explorer is not quite working correctly but does at least load photos.
My only big complaint so far - apart from the security issues mentioned above which may yet prove to be serious. Oh, I am a little concerned about the non-vetting of photos by new users - could be nasty.

Klipspringer

2385 posts

Uber Geek
Inactive user

#694174 1-Oct-2012 13:45

Can't seem to log in anymore. Maybe they have suspended my account

xpd

aka Fast Raccoon !
13007 posts

Uber Geek

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#694175 1-Oct-2012 13:47

Yup same here... login server died ? 39/40 servers 404'ed ?

Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

xpd.co.nz - Retro gaming, geek stuff and more kiwiblast.co.nz - Lego and more

Support Kiwi music! The People Black Smoke Trigger Like A Storm Devilskin

NZ GEEKS Discord______________________________

freitasm

BDFL - Memuneh
76342 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#694176 1-Oct-2012 13:48

Same here. I guess their login server is down to encrypt passwords ;)

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

Klipspringer

2385 posts

Uber Geek
Inactive user

#694177 1-Oct-2012 13:49

I think we have a fly on the wall in this thread :-P

DoggNZ

437 posts

Ultimate Geek
Inactive user

#694178 1-Oct-2012 13:50

Bit of unscheduled maintenance perhaps......

networkn

Networkn
30207 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#694179 1-Oct-2012 13:51

BraaiGuy: I think we have a fly on the wall in this thread :-P

Good, anything that makes the site better is good!

webup

535 posts

Ultimate Geek

#694180 1-Oct-2012 13:51

DonGould: http://www.wheedle.co.nz/Search/ItemDetails?id=3608

The action doesn't appear in the 'other' list...

http://www.wheedle.co.nz/Search/List?Category=131&Level=2

So if this action doesn't appear in the list, then what others also don't?

There's also talk about how it's only $1 to list... yet on TM it's only 55c to list. Yes, you pay when you sell, but what if you want to list two dozen products knowing that many won't sell?

Are people realistically going to spend money to list products if they're not going to sell?

Are people going to bother listing if their listings just don't show up in the listings?

General items

List your ad for free

Fee - $1 (only when your item has sold for over $20)
Up to 10 photos and video option
Until sold or withdrawn
Auction duration 1 - 14 days
$1 payment is deducted from members account when the item has sold
Withdrawing an auction before the scheduled finish time will incur a cancellation charge of $3

1 | ... | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | ... | 36