No need to bookmark this page; your computer will seek it out again on its own.

New Feature in "Doomed to Obscurity": Random Strip

Date/Time Permalink: 09/15/11 08:32:14 pm
Category: Site News

Not terribly big news, but I've added a "random" link to the navigation bar under the strip on my webcomic Doomed to Obscurity. Click link, random past strip comes up, just like you'd expect. It's about time I caught up with the zillion other webcomics out there and added this.

I should add, a White Knight reader pointed out that there was a problem with my failing to check the input to the "$strip=" parameter in the URL, so some smart-ass could have typed "index.php?strip=0000001.jpg ' <and a bunch of code tags here>" and given it to someone else as a link to click. That is what we call a "code injection vulnerability" and it's a naughty, naughty thing for a variable to do. I did check trying to get Javascript to execute that way and always got a 403-forbidden, so my system is apparently too smart for that (or God knows, I coded something else back there and forgot about it), but I closed that loophole now by rigorously checking the variable's contents before using it.

And then tossed in the random-link feature. See what it takes to get me to update something around here?

Follow me on Twitter for an update every time this blog gets a post.
Stumble it Digg this Reddit this add to Delicious share on Facebook

blog comments powered by Disqus
suddenly the moon