[theymos] Bug with Merit (for sending)

criptoevangelista

sr. member

Activity: 448

Merit: 688

In ₿ we trust

Quote from: philipma1957 on April 28, 2024, 09:30:54 AM

Quote from: criptoevangelista on April 23, 2024, 04:02:43 PM

Friends, I suggest you test several things, there may be some hidden code that releases more merits for you. Try it right here in my post, feel free Grin

_{(don't take this post seriously)}

gave you 3 merits for a sunday morning laugh

Ah dear Philip, thank you very much for these merits, a random post like that is always good for us to laugh a little, isn't it? haha. A great Sunday for you

philipma1957

legendary

Activity: 4256

Merit: 8551

'The right to privacy matters'

Quote from: criptoevangelista on April 23, 2024, 04:02:43 PM

Friends, I suggest you test several things, there may be some hidden code that releases more merits for you. Try it right here in my post, feel free Grin

_{(don't take this post seriously)}

gave you 3 merits for a sunday morning laugh

PowerGlove

hero member

Activity: 510

Merit: 4005

Quote from: LoyceV on April 28, 2024, 02:37:55 AM

Lol. I've reached my monthly limit, so all I could send you was 0.002e3 Merits.

Haha. I sent you 1000e-3 merits; don't spend them all in one place. Cheesy

(Putting a minus sign before the exponent divides the significand instead of multiplying it.)

Quote from: Jet Cash on April 28, 2024, 05:22:00 AM

Hasn't anybody tried to use the infinity symbol to give the maximum?

That's a cool idea. Maybe theymos could make it so that sending someone * merits results in you sending them the maximum you can. (An asterisk is easy to type, and if you squint, it looks a bit like a tiny bomb that's just started to explode, so it kind of makes sense, too, as in "merit bombing" someone.) Grin

tranthidung

legendary

Activity: 2310

Merit: 4085

Farewell o_e_l_e_o

Quote from: LoyceV on April 28, 2024, 02:37:55 AM

Quote from: PowerGlove on April 24, 2024, 09:31:06 PM

another way to send someone 20 merits would be to send them 0.02e3 merits.

Lol. I've reached my monthly limit, so all I could send you was 0.002e3 Merits.

It seems hugeblack tested it already and it ended as 20 merit sent to PowerGlove. Maybe hugeblack can confirm this but I don't think there is coincidence of the 20 sent merit and this given information for testing from PowerGlove.

Quote from: Jet Cash on April 28, 2024, 05:22:00 AM

I can tell you guys are computer Huh

??s. Anywhere else people would just be using digits. Hasn't anybody tried to use the infinity symbol to give the maximum?

Infinity symbol will not work, I did not test it but as I know, theymos coded that one user can only send another user 50 merits per month. It's the cap, not infinity.

Jet Cash

legendary

Activity: 2814

Merit: 2472

https://JetCash.com

I can tell you guys are computer Huh

??s. Anywhere else people would just be using digits. Hasn't anybody tried to use the infinity symbol to give the maximum?

LoyceV

legendary

Activity: 3290

Merit: 16489

Thick-Skinned Gang Leader and Golden Feather 2021

Quote from: PowerGlove on April 24, 2024, 09:31:06 PM

another way to send someone 20 merits would be to send them 0.02e3 merits.

Lol. I've reached my monthly limit, so all I could send you was 0.002e3 Merits.

SickDayIn

member

Activity: 210

Merit: 31

Quote from: tranthidung on April 23, 2024, 11:02:31 AM

I typed 1\ when I want to send 1 merit and it works.

To test it again, I typed 1/ and it works too.

Tested it again with 1~, and it works too.

Can these ones be considered as bugs with Merit button?

Please check it theymos. Cheesy

I guess the box should accept number only, not string.

You know, one idea pops up in my head, and I want to hijack the merit system by using exponential but it does not work.

Code:

2^2

It only allows me to send 2 merit, not 4. Undecided

This wouldn't be considered a bug as there is no impact. Whether or not you add the the /, \, or ~, the total merit sent does not change. It could be considered that there is insufficient input validation, and maybe the merit sender should only accept numerical entries both client side and server side. However regardless it seems to be stripping anything posted after the integer specified. It's important to only raise bugs that have an actual impact and at this stage it's negligible.

PowerGlove

hero member

Activity: 510

Merit: 4005

Hehe, this is not a bug, it's just how PHP handles string -> number conversions. (If I had to guess, I'd say that there's an (int) cast happening on $_POST['merits'].)

Interestingly, the rules allow for scientific notation (more specifically: E notation), so something like 2e1 means 2*10^1 = 20 merits. Even in the context of an (int) cast, I think the leading number can have a decimal point, so another way to send someone 20 merits would be to send them 0.02e3 merits.

BlackHatCoiner

legendary

Activity: 1512

Merit: 7340

Farewell, Leo

I found the bug in the bug:

Code:

\1

'\' probably ignores the character next to it.

hugeblack

legendary

Activity: 2688

Merit: 3983

We cannot describe it as a bug, since the definition of a bug is an unexpected problem when execution, and since the results here are correct and expected, it is the way the code is executed.

It is better give an error message if sending box contain anything other than numbers, but what happens is that the first numbers are executed and the following values are ignored.

Quote from: TryNinja on April 23, 2024, 11:04:37 AM

Seems like it just ignores everything that isn't a number, which feels like the ideal behavior.

I think it ignores anything after the number if it is not a number, since 1~.0 is 1, not 10, and so on.

pinggoki

sr. member

Activity: 1666

Merit: 426

This just gave me an idea and now I'm wondering how a lot of you guys do the merit thing, it's a really way to test out if there's going to be a bug, I can imagine someone trying those script kiddies SQL injections, I mean that would be happening right? Unless of course there's a limit to what can be the number of characters that you can put in that box. Imagine doing some equations in that, let's see what number's going to get registered.

Sandra_hakeem

hero member

Activity: 798

Merit: 1045

Goodnight, ohh Leo!!! 🦅

I'd barely get distracted by the least, imperceptible thing like this... ^{[a bug that doesn't obstructe my route when navigating the forum]}... Well, that shows how attentive alot of people can be, kudus TTD!

The only time I was able to detect anything that looks like a bug so fast was when I sent some merit out, refreshed the page and it repeated exactly the same command ^{[without showing up a dialogue box]}. I think that was fixed anyways!

Quote from: BitcoinGirl.Club on April 23, 2024, 11:38:48 AM

Code:

2^2

A text input box is not a calculator LOL.

lol ...uhhh, is he part of the code writers we've got? How did he immediately think of the exponentials? Hahahaha!

criptoevangelista

sr. member

Activity: 448

Merit: 688

In ₿ we trust

Friends, I suggest you test several things, there may be some hidden code that releases more merits for you. Try it right here in my post, feel free Grin

_{(don't take this post seriously)}

un_rank

hero member

Activity: 644

Merit: 661

- Jay -

^ I just sent out my last smerits while testing if 1-2 is accepted by the algorithm and apparently it is.

Quote from: Faisal2202 on April 23, 2024, 12:49:08 PM

This shows that you guys are rich with merits haha, as speaking of myself, when I wanted to give someone merit, I don't do such experiments with the feat or lose all the smerits,

If you have low smerits you can still test it out, just make sure you start with a number higher than the number of smerits you have. If it's accepted by the system it will tell you you don't have enough smerits but if it's not, it'll show "invalid amount"

Quote from: TryNinja on April 23, 2024, 11:04:37 AM

If I ever see a super B post I'll try something like "1-.0" to see if it sends 10 merits. Grin

Super B

- Jay -

dzungmobile

sr. member

Activity: 854

Merit: 424

I stand with Ukraine!

Quote from: dkbit98 on April 23, 2024, 12:53:20 PM

This won't work.
I tried sending tranthidung 0-1 and 1-.0 merits and it didn't work showing invalid amount error.
It's not ignoring all other characters if they are written between two or more numbers.

It seems theymos only excluded - (for negative value) when he fixed that bug in 2018. For other characters, they all work. My guess only because I can not test all of them as it will force me to send out many merit.

When I tried with

Code:

1+0

It worked because you receive 1 merit from me.

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: TryNinja on April 23, 2024, 11:04:37 AM

Is it a bug, though?

I merited you with 1% and it worked Wink

Quote from: TryNinja on April 23, 2024, 11:04:37 AM

If I ever see a super B post I'll try something like "1-.0" to see if it sends 10 merits. Grin

This won't work.
I tried sending tranthidung 0-1 and 1-.0 merits and it didn't work showing invalid amount error.
It's not ignoring all other characters if they are written between two or more numbers.

Faisal2202

hero member

Activity: 1386

Merit: 513

Payment Gateway Allows Recurring Payments

Quote from: TryNinja on April 23, 2024, 11:04:37 AM

Seems like it just ignores everything that isn't a number, which feels like the ideal behavior.

If I ever see a super B post I'll try something like "1-.0" to see if it sends 10 merits. Grin

This shows that you guys are rich with merits haha, as speaking of myself, when I wanted to give someone merit, I don't do such experiments with the feat or lose all the smerits, as I have seen cases where we send merits accidentally by reloading the page. I would never do such experiments but until I have good amount of smerits.

And yeah OP you are right, the field should accept numbers only, but they are not accepting anything other than numbers than that's also fine. But still for the sophistication of the forum as its growing day by day, some changes are must. Admins should remain more active.

SmartGold01

hero member

Activity: 882

Merit: 800

Quote from: tranthidung on April 23, 2024, 11:02:31 AM

You know, one idea pops up in my head, and I want to hijack the merit system by using exponential but it does not work.

Code:

2^2

It only allows me to send 2 merit, not 4. Undecided

Lols.. You should know the system isn't configured that way.
I have never tried it but for my understanding the merits button is only powered to be sending 1, 2, 3, 4, 5,6,7,8,9, 10+ and above merits, and not by multiplications or exponentially.
So, do you think theymos would accepts putting that way you think?

BitcoinGirl.Club

legendary

Activity: 2800

Merit: 2736

Farewell LEO: o_e_l_e_o

Quote from: tranthidung on April 23, 2024, 11:02:31 AM

You know, one idea pops up in my head, and I want to hijack the merit system by using exponential but it does not work.

Code:

2^2

It only allows me to send 2 merit, not 4. Undecided

A text input box is not a calculator LOL.

tranthidung

legendary

Activity: 2310

Merit: 4085

Farewell o_e_l_e_o

Quote from: KingsDen on April 23, 2024, 11:10:36 AM

Then I tried the opposite

Code:

-1

And it says invalid. This means "-" placed at the left side makes a number but at the right side is just a sign.

Please read my above post, the quote block.

For negative merit number, it was reported as a bug, and theymos fixed it. Makes sense if now you can not send any negative merit to demerit other users.

Topic: [theymos] Bug with Merit (for sending) (Read 411 times)