Recent changes to bugs

statement object in session

Kevin Brown — Fri, 21 Mar 2003 18:40:40 -0000

the statement object in the session appears to be
causing some issues with recordsets, and updates.
This is a system wide issue, and should be resolved
before the next release.

annoying user editor bug

Anonymous — Wed, 12 Mar 2003 21:31:43 -0000

seems a # 2 was hardcoded into the adminuseredit.jsp
page instead of a dynamic user number. This should be
replaced with the current user's number specified by
request.getParameter("unum")

there are two occurances... specified by 2 - 1 and 2 + 1

problem in display of encoded strings

Kevin Brown — Thu, 06 Mar 2003 15:31:30 -0000

There is an issue in the WINEWS/WIGUEST modules
where encoded text will not wrap, and cause the display
frame to fault over into scroll-bars. I believe this could
be solved by using <p>/</p> tags instead of the <br>

places where this occurs :

wiguestadd.jsp
wiguestadminupdate.jsp
winewsadminadd.jsp
winewsadminupdate.jsp

There will also be issues with the replace <which should
also likely be moved to a bean> method in the following
pages :

wiguestadminarc.jsp
wiguestadmin.jsp
winewsadmin.jsp
winewsadminarc.jsp

login is insecure

Kevin Brown — Tue, 04 Mar 2003 11:35:03 -0000

login could be spoofed using the ' character which is not
currently checked for. all variables posted to the
login.jsp page from the loginform.jsp page.

other reserved characters should also be verified. for
reference, you can look at the encodeHtml method in
the wiguestadd.jsp page of the WIGUEST module. We
should also consider moving this function to a
centralized location since it is widely used.

problem with ' in news post

Kevin Brown — Thu, 06 Feb 2003 19:54:36 -0000

the input text needs to be formatted to work in the SQL
statement.

menu generation : admin

Kevin Brown — Tue, 12 Nov 2002 12:11:56 -0000

the menu doesn't generate when a user is logged in as
admin

logout fails

Kevin Brown — Tue, 12 Nov 2002 12:10:36 -0000

the logout link fails

guest menu

Kevin Brown — Tue, 12 Nov 2002 12:00:31 -0000

The menu does not display for guests who are not
logged in as 'guest'

Menu after login

Kevin Brown — Wed, 02 Oct 2002 20:02:48 -0000

The menu resets to closed after a successful login. It
should maintain it's location. Add the querystring to the
submit button on the login form

Login Glitch

Kevin Brown — Mon, 23 Sep 2002 19:56:35 -0000

redirect on login should be reset to equal menu instead
of index.

Currently a login results in the page being displayed
within itself