|
Taiche
France1963 Posts
Hey guys !
Like in the previous blog entry (omg, 4 months without blogging), I need beta-testers for my project. Recap of what it is :
- It's for a website. No need to install anything on your computer except for a web browser.
- It's about StarCraft. You need to know what SC is about and have some replays on your HDD (not too big of a requirement, I guess
 )
- You need to be serious. By that, I mean you want to do a good job and not register "just to see what it's all about".
That also includes you being curious and want to test every single aspect of the website to see what could possibly be wrong.
- You must know how to make constructive comments. Simple "this is bad" or "it doesn't work" comments are useless and won't help. Preferred ways are things like "when I do this and this with this data, I have this error message (or it does this while I expected that) ; here's the URL".
- Having notions of website security flaws would be nice (but not required) ; if you know what cross-site scripting or SQL injection attacks are and you are able to try them on the site, then be my guest. I'd really like to know the potential flaws of the site before putting it online "for real".
- OR if you don't have a technical background, then having a good idea of a website's ergonomy and user-experience would be great.
- OR you have a lot of experience with replays sites and think you know what such a site should offer.
- This is the last beta test session before the final release that should occur in June if everything is OK.
That should be all. Point 3 is the one that is the most important to me : I do not want to waste time or bandwidth with people being merely curious This is not that cool of a website anyway.
Of course, beta-testers will be credited in the credits section of the site, just like the ones who helped in the first session are.
So, if you're OK with all this, just apply in the comments section. Registration will close on Friday 16th and tests will begin right after (ideally, I would like them to start on Saturday or Sunday).
Thanks for helping me if you can, it will be greatly appreciated 
UPDATE : people in there so far :
- Manifesto7
- Centric
- Nitrogen23
- pachi
- thedeadhaji
- nemY
- yenta
- katona
|
WAIT. Isn't that aroudn when rekrul wants his site released?
Hmmmmmmmmmmmmmmmmm......
Good luck in your search.
|
Belgium9947 Posts
On May 13 2008 19:37 SnowFantasy wrote:
WAIT. Isn't that aroudn when rekrul wants his site released?
Hmmmmmmmmmmmmmmmmm......
Good luck in your search.
No, it's not that. If you can, help this man.
|
Osaka27149 Posts
|
|
|
Taiche
France1963 Posts
Thanks guys, OP updated with names of peopl who'll help
|
Uhm, the 17th is a saturday 
|
Taiche
France1963 Posts
Bah, I suck at counting -_-;
Fixed, thanks
|
|
|
i guess i can help. I don't really know too much technical stuff, but i still think i could help some :D
|
Melbourne5338 Posts
I'll help, i have enough free time to click more than enough.
edit: I also use a mac half the time, will that get me bonus points or dq me?
|
Taiche
France1963 Posts
Depends, what browser do you use ? FF or Safari ?
|
Melbourne5338 Posts
Camino usually, but FF as a secondary.
|
Taiche
France1963 Posts
OK, no bonus point ;p
Actually, I am highly interested in feedbacks from Camino users but I guess that's the same engine as Firefox. I have yet to test the site using Opera by myself.
|
thedeadhaji
39489 Posts
Taiche I'm not sure how much time I have these days but I'll be more than happy to help where I can.
|
Melbourne5338 Posts
On May 14 2008 01:27 Taiche wrote:
OK, no bonus point ;p
Actually, I am highly interested in feedbacks from Camino users but I guess that's the same engine as Firefox. I have yet to test the site using Opera by myself.
I use opera on my windows PC. Firefox and IE are too big and clunky.
|
Taiche
France1963 Posts
On May 14 2008 01:37 thedeadhaji wrote:
Taiche I'm not sure how much time I have these days but I'll be more than happy to help where I can.
Sure, no problem. Actually, I am in need of people's impressions about the site's ergonomy, etc... So that's where you can help if you don't have much time. A mere 5-minute test can cover most features and you'll be able to tell me if something can be accessed easily or hidden or missing, etc...
On May 14 2008 01:40 pachi wrote:I use opera on my windows PC. Firefox and IE are too big and clunky.
Yeah but FF definitely has the best rendering for me because it sticks mostly to standards (while IE doesn't -_-; ). Plus FF 3.0 reportedly is much much faster than the current version.
|
|
|
thedeadhaji
39489 Posts
a frenchman w/ the name Bill? O_O
|
Taiche
France1963 Posts
Haha, my actual name is not Bill but it's close ;p
|
I will help - it'll be fun to see if i can pull some xss off
|
Taiche
France1963 Posts
Yeah thanks, it's something I need a lot as well
|
I'm down for this, I know a bit about cross site scripting and a tiny bit about SQL Injection. Also, the more generic logic holes are fun to find as well.
|
Taiche
France1963 Posts
Cool, thanks
|
Germany2896 Posts
Using formatstring based queryfunctions like the following reduces the the risk of SQL-Injection significantly. We also log all query errors to the database on the live system, which allows fast detection of such errors. (You can also opt for email). I removed some project specific parts and the parts not written by myself.
+ Show Spoiler +function query() { $args = func_get_args(); $args_count=func_num_args(); if ($args_count==0){die('Query needs at least one parameter');}; if ($args_count>1) { for ($i=1;$i<$args_count;$i++) { if (get_magic_quotes_gpc()) $args[$i]=stripslashes($args[$i]); $args[$i]=mysql_real_escape_string($args[$i]); } $qry=call_user_func_array('sprintf', $args); } else $qry=&$args[0]; $res=@mysql_query($qry); if ($res===false) { collect additional info about the site like POST and GET Data if (($_SERVER['REMOTE_ADDR']=='127.0.0.1')or(Is User an Admin?)) { echo('<div class="sql_error">Mysqlerror:<br><pre>'.htmlentities($qry).'</pre><br>'.htmlentities(mysql_error()).'</div>'); } else { Log query to database here die('SQL-Error'); } } return $res; }
Usage:
$res=query("select * from table where name='%s'",$nick);
$res=query("select * from table where id=%d",$id);
|
Taiche
France1963 Posts
Yeah thanks, but I already have classes doing all that ;p Actually, I think I have rewritten some sort of ORM without knowing it. Should have reused one instead... bah.
|
why not just use a framework that does all of that for you
|
|
|
|
|
|
EPT
