Hi,

following discussions about username and passwords, I made some
experiments with REBOL 2.2.0.3.1, Windows NT and IIS 4.

It appears that REBOL crashes randomly when length of username and
password (i.e. length? rejoin [username password]) is smaller than 11
characters, no matter if the password is valid or not.

Valid usernames and passwords for my test system are:
webuser,login  ; longer than 10 characters
webuse2,log    ; 10 characters

Here are the results, I use loop because the crashes are somewhat
random.

>> loop 10 [ error? try [ a: read [ scheme: 'http user: "webuser" pass: "login" host: 
>"localhost" path: "/" ] ] ]
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
== false

No crash here.

>> loop 10 [ error? try [ a: read [ scheme: 'http user: "webuser" pass: "logi" host: 
>"localhost" path: "/" ] ] ]
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
== true

The user cannot read the page with invalid password, REBOL does not
crash.

>> loop 10 [ error? try [ a: read [ scheme: 'http user: "webuser" pass: "log" host: 
>"localhost" path: "/" ] ] ]
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost
connecting to: localhost

The user cannot read the page with invalid password, REBOL sometimes
crashes and sometimes waits infinitely.

>> loop 10 [ error? try [ a: read [ scheme: 'http user: "webuse2" pass: "log" host: 
>"localhost" path: "/" ] ] ]
connecting to: localhost
connecting to: localhost
connecting to: localhost

The user can read the page with valid password, but REBOL crashes.

-- 
Michal Kracik

Reply via email to