Hi!

  Thanks for comments, all should be fixed.

On Sat, Oct 11, 2014 at 10:44:23PM +0200, [email protected] wrote:
> Hello, you need to truncate input to your forms serverside.  Currently, I 
> can freeze you up pretty bad simply by putting really long strings in the 
> input boxes.


On Sat, Oct 11, 2014 at 10:51:31PM +0200, [email protected] wrote:
> OK, probably not exploitable, but something isn't quite perfect with your 
> string rendering ;).  If I type < into the first text box I get the 
> error:
> 
> Preference for Tinky Winky is <, which is not a number. Please go back and 
> try again.
> 
> Rather than having it quote me exactly.


On Sat, Oct 11, 2014 at 10:56:29PM +0200, [email protected] wrote:
> Number equality for very large numbers is broken, such that your program 
> thinks that all very large numbers are equal(or something like that).  But I
> guess that doesn't matter either.


On Sat, Oct 11, 2014 at 10:58:17PM +0200, [email protected] wrote:
> Podle pravidla, 0 by asi měl hlasit chybu, ne?
> 
> Success. Your vote (1,0,2,3,4) has been saved. You may still revise your 
> vote before the closing call if you wish, but do NOT cast a paper ballot at 
> this point anymore!

-- 
                                Petr Baudis
        Life is short, the craft long, opportunity fleeting, experiment
        treacherous, judgment difficult.  -- Hippocrates
_______________________________________________
Brmlab mailing list
[email protected]
http://brmlab.cz/cgi-bin/mailman/listinfo/brmlab

Odpovedet emailem