Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.php > #17493

Re: Ecommerce site - how?

Path csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From "J.O. Aho" <user@example.net>
Newsgroups comp.lang.php
Subject Re: Ecommerce site - how?
Date Tue, 27 Jun 2017 07:19:02 +0200
Lines 51
Message-ID <ere866Fn9ftU1@mid.individual.net> (permalink)
References <d2223e3b-f44c-4ef7-b55a-94e012d85a95@googlegroups.com> <oiodsn$pud$1@gioia.aioe.org> <PcqdnRTWK6vXeM3EnZ2dnUU7-X3NnZ2d@posted.internetamerica> <oir89b$187l$1@gioia.aioe.org> <ercr2hFf9c6U1@mid.individual.net> <oirfjf$1na2$1@gioia.aioe.org> <oirgc3$hu4$1@jstuckle.eternal-september.org> <oirinj$1t87$1@gioia.aioe.org> <erd5pbFhbolU1@mid.individual.net> <oirtfe$h7d$1@gioia.aioe.org>
Mime-Version 1.0
Content-Type text/plain; charset=utf-8
Content-Transfer-Encoding 7bit
X-Trace individual.net 9t1uYSm+NpaMRXlyQoZpuw7Cg/FcU1BAalpReouTVGB/Pm7RrN
Cancel-Lock sha1:LkPm/dbfxQEd6BlpBllvRJTi+a8=
User-Agent Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.0
In-Reply-To <oirtfe$h7d$1@gioia.aioe.org>
Content-Language en-GB
Xref csiph.com comp.lang.php:17493

Show key headers only | View raw


On 06/26/17 22:29, R.Wieser wrote:

>> What about the case when it's time to renew your lease and you
>> happen to be shopping and your ISP decided it's time for you to
>> switch to a less busy network.
> 
> Than you have a  problem with your ISP, and not the e-commerce site.

No, it's not an issue with ISP, it's the e-commerce site which is the issue.

> Don't be as stupid to expect such a site to solve all the quirks the
> intermediate ISPs have (purposely, often in full disregard to their
> customers needs) inserted in their networks.

So you mean that ISP should provide the worse possible customer
experience so that badly designed e-commerce sites would keep on working?


>> Also keep in mind that IP can also be spoofed in a number of ways,
>> so keeping track of the IP is no way a good method, it's better to use
>> request verification tokens.
> 
> Lol.   I could explain to you that CSRF attack and link hijacking defense
> methods must-and-are rather different (the first is done within your
> browser, the second definitily not), but as you are the one suggesting it yu
> must have an idea how its applicable. So, be my guest and explain.
> 
> And a hint: *both* parts of that "token" are placed in the same HTTP
> request.

Yes, it will be part of the same http post, but that don't mean it will
be automatically added to CSRF request. So just make a second visit to
OWASP and start reading.


>> PS. Stop that stupid bottom posting of the previous post, even a
>> second grade news reader like outlook can manage to keep track
>> of threads.
> 
> You're an arrogant, short-sighted shit   Your here-and-now is not the only
> thing thats important you know.   Just imagine someone searching the web for
> a certain answer, and all he can find is the current  message.   For that
> reason I keep a copy of the origional post to at the bottom of my reply.

Yes, if he finds current one, he will find the previous one too, unless
using some obscure search engine that just index one message in each thread.

> And if you do not like it, you *could* just stop at the line where I mention

It's just extra work on your posts with deleting and by the way the your
news client modifies the "original" text.

Back to comp.lang.php | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Ecommerce site - how? bit-naughty@hotmail.com - 2017-06-25 05:42 -0700
  Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-25 15:30 +0200
    Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-25 16:03 +0200
    Re: Ecommerce site - how? gordonb.y152t@burditt.org (Gordon Burditt) - 2017-06-26 05:43 -0500
      Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 17:12 +0200
        Re: Ecommerce site - how? "Christoph M. Becker" <cmbecker69@arcor.de> - 2017-06-26 17:54 +0200
          Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 19:40 +0200
            Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-26 21:42 +0200
              Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 23:14 +0200
                Re: Ecommerce site - how? "Christoph M. Becker" <cmbecker69@arcor.de> - 2017-06-27 00:28 +0200
                Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 10:48 +0200
                Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-27 07:56 +0200
                Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 12:27 +0200
                Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-27 19:15 +0200
                Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 22:01 +0200
                Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-28 07:07 +0200
                Re: Ecommerce site - how? Gordon Burditt <gordon@hammy.burditt.org> - 2017-06-30 17:08 -0500
        Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-26 18:29 +0200
          Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 19:17 +0200
            Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-26 13:34 -0400
              Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 20:11 +0200
                Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-26 21:31 +0200
                Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 22:29 +0200
                Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-27 07:19 +0200
                Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 11:24 +0200
                Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-27 19:43 +0200
                Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 23:09 +0200
                Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-28 07:12 +0200
                Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-27 21:10 -0400
                Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-26 16:32 -0400
                Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 10:30 +0200
                Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-27 08:38 -0400
                Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 17:47 +0200
                Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-27 12:16 -0400
                Re: Ecommerce site - how? gordonb.bytf1@burditt.org (Gordon Burditt) - 2017-06-29 18:16 -0500
                Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-29 20:41 -0400
                Re: Ecommerce site - how? gordonb.99a3p@burditt.org (Gordon Burditt) - 2017-06-29 23:39 -0500
                Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-30 07:28 -0400
                Re: Ecommerce site - how? Stefan+Usenet@Froehlich.Priv.at (Stefan Froehlich) - 2017-06-30 13:48 +0000
                Re: Ecommerce site - how? gordonb.gcghn@burditt.org (Gordon Burditt) - 2017-06-30 16:15 -0500
                Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-30 22:35 -0400
                Re: Ecommerce site - how? Richard Damon <Richard@Damon-Family.org> - 2017-06-29 23:46 -0400
        Re: Ecommerce site - how? gordonb.d2wed@burditt.org (Gordon Burditt) - 2017-06-29 17:32 -0500
  Re: Ecommerce site - how? bit-naughty@hotmail.com - 2017-06-27 10:58 -0700
    Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-27 15:34 -0400
    Re: Ecommerce site - how? gordonb.4psc7@burditt.org (Gordon Burditt) - 2017-06-30 16:55 -0500
      Re: Ecommerce site - how? bit-naughty@hotmail.com - 2017-07-01 03:03 -0700
        Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-07-01 09:30 -0400
        Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-07-01 09:34 -0400

csiph-web