 | | Re: Web interface cancels (was Re: Let's define what an auction announcement/update is) —David Eaton
|
| | | (...) Not really, although it can be. The problem being mainly that the web interface will still let you post if you don't have a cookie. It can actually give you a new one in some cases. So if I post a message as Bob Shmoe, I can get a cookie as (...) (24 years ago, 28-Nov-00, to lugnet.admin.general)
|
| | | |
| | | | | Re: Web interface cancels (was Re: Let's define what an auction announcement/update is) —Dan Boger
|
| | | | | (...) eh? the only way you can get an id cookie is by putting in the confirmation code, isn't it? Also, if you can cancel messages only by you, and only if you're logged in (have to be a member), that's pretty secure... No way to get the member (...) (24 years ago, 28-Nov-00, to lugnet.admin.general)
|
| | | | | |
| | | | | | | Re: Web interface cancels (was Re: Let's define what an auction announcement/update is) —David Eaton
|
| | | | | | | (...) Oh? I could easily be wrong-- being a still-starting-out web programmer my browser's cookies are always being rewritten, etc, so I'm not sure. But I thought that there were something like three different cookies that Lugnet can drop you? - (...) (24 years ago, 28-Nov-00, to lugnet.admin.general)
|
| | | | | | | |
| | | | | | | Re: Web interface cancels (was Re: Let's define what an auction announcement/update is) —Larry Pieniazek
|
| | | | | | Do we have numbers on relative mail/nntp/web POSTING usage? (...) NNTP already allows cancel. It is possible for someone who knows the NNTP protocol to forge cancels, I believe, but I am not sure. I would be OK with web cancel only working when you (...) (24 years ago, 28-Nov-00, to lugnet.admin.general)
|
| | | | | | |
| | | | | Re: Web interface cancels (was Re: Let's define what an auction announcement/update is) —Todd Lehman
|
| | | | (...) Ug, that's kinda gross. I think the cleanest way is what someone suggested earlier: When you request that a post be cancelled, the server simply send a confirmation e-mail to the person who posted the message. If they get the e-mail, it proves (...) (24 years ago, 28-Nov-00, to lugnet.admin.general)
|
| | | | |
