Undeletable garbage nodes on london.openguides.org

[earle]

Thu Dec 9 19:22:29 2004 EMARTIN - Ticket created [Reply] [Comment]

Subject: Undeletable garbage nodes on london.openguides.org

If you view the list of all pages in Category Locale: http://london.openguides.org/?action=index;index_type=category;index_value=Locales

The first page is "Locale", which doesn't exist(?) - and I can't delete it. Also, further down is "Locale [Trafalgar Square;version=2", which was created a while back by somebody's web robot going beserk, before we disabled autocreation. I tried to delete it, but didn't notice that the Delete Node link pointed to http://london.openguides.org/index.cgi?id=Home;action=delete , and ended up deleting "Home" by mistake. Whoops.

Download (untitled) 564b

Thu Dec 9 19:23:36 2004 EMARTIN - Correspondence added [Reply] [Comment]

s/pointed/pointed erroneously/;

Download (untitled) 34b

Mon Dec 13 19:20:16 2004 DOM - Severity Normal added Wed Dec 29 15:25:35 2004 EMARTIN - Correspondence added [Reply] [Comment]

This seems to be related to RT 6389; certainly there's something amiss with the delete function. Maybe some characters not being escaped properly?

Download (untitled) 146b

Sat Jan 1 22:05:46 2005 DOM - Ticket 8814 RefersTo? ticket 6389.

[dom]

Did anything ever happen with this?

[EarleMartin]

"Locale [Trafalgar Square;version=2" is still there, and I still can't get rid of it (IIRC, I left it there on purpose as a test case rather than fudging the database directly).

Incidentally, this bug has exposed a security problem that lets us get spammed. Look for "Locale Hello Guys, Interesting Discussion... BTW What You Think About Fight Against Alcohols And Drugs Detox" - the second half of that title in the list of locales is a working hyperlink to another site. I'd rate this as a higher severity in that light. (Although that may merit a separate sub-bug about HTML in locale/category names not being escaped [in the template?] or some such.)

[ivorw]

The historical garbage nodes didn't survive the September disaster. However, we have two new ones put in by a spammer:

http://london.openguides.org/index.cgi?Locale_Hello_Guys%2C_Interesting_Discussion..._BTW_What_You_Think_About_%3Ca_Href%3Dhttp%3A%2F%2FZerohops.Com%2F%3EFight_Against_Alcohols_And_Drugs_Detox%3C%2FA%3E http://london.openguides.org/index.cgi?Category_Hello_Guys%2C_Interesting_Discussion..._BTW_What_You_Think_About_%3Ca_Href%3Dhttp%3A%2F%2FZerohops.Com%2F%3EFight_Against_Alcohols_And_Drugs_Detox%3C%2FA%3E

This issue perhaps should be addressed at source, see [ticket/22]

[ivorw]

Link above should be to Ticket #22 (ivorw is learning how to use the wiki effectively)

[dom]

This is pretty much a duplicate, so I'm closing this.