Scam Accusation: Magazine, wants a website, doesn't pay.

[r3wt]

When I change the value and wait/change the currency it updates for me... I will gladly make a video to prove this.

Welp, it works correctly here now too.

See, I ain't crazy! Hahaha.

Got another one though.  

You may wanna sanitize the input for "btcamount", restrict the field length. I just threw in a few hundred "9"s so the "output" ticked over into #INF. The page doesn't like that at all. It's not accepting any type of input anymore after doing that (neither changing the btcamount nor switching the currency).

Look, that is a real bug. I would have gladly fixed that if he told me that.

i have a couple custom sanitization scripts at two levels php and htaccess. you may use them if you wish

[Mitchell]

When I change the value and wait/change the currency it updates for me... I will gladly make a video to prove this.

Welp, it works correctly here now too.

See, I ain't crazy! Hahaha.

Got another one though.  

You may wanna sanitize the input for "btcamount", restrict the field length. I just threw in a few hundred "9"s so the "output" ticked over into #INF. The page doesn't like that at all. It's not accepting any type of input anymore after doing that (neither changing the btcamount nor switching the currency).

Look, that is a real bug. I would have gladly fixed that if he told me that.

i have a couple custom sanitization scripts at two levels php and htaccess. you may use them if you wish

Well, that sounds great. Thanks for the offer dude! I will definitely keep that in mind.

[r3wt]

Here's the HTACCESS

Code:

DirectoryIndex index.php

ServerSignature Off
Options -Indexes

RewriteEngine On

RewriteCond %{REQUEST_METHOD} ^(HEAD|TRACE|DELETE|TRACK|DEBUG) [NC]
RewriteRule ^(.*)$ - [F,L]

RewriteCond %{REQUEST_URI} (timthumb\.php|phpthumb\.php|thumb\.php|thumbs\.php) [NC]
RewriteRule . - [S=1]

RewriteCond %{HTTP_USER_AGENT} (libwww-perl|wget|python|nikto|curl|scan|java|winhttp|clshttp|loader) [NC,OR]
RewriteCond %{HTTP_USER_AGENT} (<|>|'|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]
RewriteCond %{HTTP_USER_AGENT} (;|<|>|'|"|\)|\(|%0A|%0D|%22|%27|%28|%3C|%3E|%00).*(libwww-perl|wget|python|nikto|curl|scan|java|winhttp|HTTrack|clshttp|archiver|loader|email|harvest|extract|grab|miner) [NC,OR]
RewriteCond %{THE_REQUEST} \?\ HTTP/ [NC,OR]
RewriteCond %{THE_REQUEST} \/\*\ HTTP/ [NC,OR]
RewriteCond %{THE_REQUEST} etc/passwd [NC,OR]
RewriteCond %{THE_REQUEST} cgi-bin [NC,OR]
RewriteCond %{THE_REQUEST} (%0A|%0D) [NC,OR]

RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=http:// [OR]
RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=(\.\.//?)+ [OR]
RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=/([a-z0-9_.]//?)+ [NC,OR]
RewriteCond %{QUERY_STRING} \=PHP[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12} [NC,OR]
RewriteCond %{QUERY_STRING} (\.\./|\.\.) [OR]
RewriteCond %{QUERY_STRING} ftp\: [NC,OR]
RewriteCond %{QUERY_STRING} http\: [NC,OR] 
RewriteCond %{QUERY_STRING} https\: [NC,OR]
RewriteCond %{QUERY_STRING} \=\|w\| [NC,OR]
RewriteCond %{QUERY_STRING} ^(.*)/self/(.*)$ [NC,OR]
RewriteCond %{QUERY_STRING} ^(.*)cPath=http://(.*)$ [NC,OR]
RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} (<|%3C)([^s]*s)+cript.*(>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} (\<|%3C).*iframe.*(\>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} (<|%3C)([^i]*i)+frame.*(>|%3E) [NC,OR] 
RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [NC,OR]
RewriteCond %{QUERY_STRING} base64_(en|de)code[^(]*\([^)]*\) [NC,OR]
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2}) [OR]
RewriteCond %{QUERY_STRING} ^.*(\[|\]|\(|\)|<|>).* [NC,OR]
RewriteCond %{QUERY_STRING} (NULL|OUTFILE|LOAD_FILE) [OR]
RewriteCond %{QUERY_STRING} (\./|\../|\.../)+(motd|etc|bin) [NC,OR]
RewriteCond %{QUERY_STRING} (localhost|loopback|127\.0\.0\.1) [NC,OR]
RewriteCond %{QUERY_STRING} (<|>|'|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]
RewriteCond %{QUERY_STRING} concat[^\(]*\( [NC,OR]
RewriteCond %{QUERY_STRING} union([^s]*s)+elect [NC,OR]
RewriteCond %{QUERY_STRING} union([^a]*a)+ll([^s]*s)+elect [NC,OR]
RewriteCond %{QUERY_STRING} (;|<|>|'|"|\)|%0A|%0D|%22|%27|%3C|%3E|%00).*(/\*|union|select|insert|drop|delete|update|cast|create|char|convert|alter|declare|order|script|set|md5|benchmark|encode) [NC,OR]
RewriteCond %{QUERY_STRING} (sp_executesql) [NC]
RewriteRule ^(.*)$ - [F,L]

<FilesMatch "^(install\.php|setup\.php|wp-config\.php|config\.php|configuration\.php|php\.ini|php5\.ini|bb-config\.php|db.php)">
Order allow,deny
Deny from all
#Allow from 1.2.3.4
</FilesMatch>

the php version will need modification based on your particular database setup

[Mitchell]

Thanks dude. I will have grab a wiki to understand the code for 100%, but from what I understand it's very very useful.

But, I guess, that this is a different sanitization then greyhawk means. I think he meant that I have to make sure to clean the input field, before it does an update

[r3wt]

Thanks dude. I will have grab a wiki to understand the code for 100%, but from what I understand it's very very useful.

But, I guess, that this is a different sanitization then greyhawk means. I think he meant that I have to make sure to clean the input field, before it does an update

yeah, it would be good to have some basic form sanitization along with the htaccess rules in place.

[TheWizzerd]

I spend quite a while on that website and I believe that time = money.

No, you didn't. That site can't have taken more then 2 minutes in Bootstrap. Add 3 minutes for copy & pasting javascript code.

For you maybe, but I never used BootStrap nor used that kind of Javascript. It took me a while to implement it right and use the custom theme. I won't say it took me more then 5/6 hours in total, but it took me some time + a lot of waiting for Magazine to reply, before I could continue working.

Still, he agreed with the price I gave him when I started working on it and that deal should be honored.

Now, I mean totally no offense bitcoininfo. Though, as a web developer myself. If the 'JavaScript' was so new to you in BootStrap.. Well, newsflash.. It's basic invocation using CSS classes for the most part.. So, maybe we should not take on project's we are not equipped to handle.

[Mitchell]

I spend quite a while on that website and I believe that time = money.

No, you didn't. That site can't have taken more then 2 minutes in Bootstrap. Add 3 minutes for copy & pasting javascript code.

For you maybe, but I never used BootStrap nor used that kind of Javascript. It took me a while to implement it right and use the custom theme. I won't say it took me more then 5/6 hours in total, but it took me some time + a lot of waiting for Magazine to reply, before I could continue working.

Still, he agreed with the price I gave him when I started working on it and that deal should be honored.

Now, I mean totally no offense bitcoininfo. Though, as a web developer myself. If the 'JavaScript' was so new to you in BootStrap.. Well, newsflash.. It's basic invocation using CSS classes for the most part.. So, maybe we should not take on project's we are not equipped to handle.

I never used Javascript before. The only thing I ever did with it was hiding something, so I had to figure out how to use it. For that matter, I didn't even know how to use jQuery. BUT, I wouldn't have offered my services, if wasn't sure that I could do it. He accepted the price and I made what he wanted (with just one bug that greyhawk found, which I could fix if I trusted him to pay me).
 
So, I don't really see the problem.

[TheWizzerd]

Well, if in the future you find yourself using JS again. Feel free to contact me and I'll give you some tips.

[Mitchell]

Well, if in the future you find yourself using JS again. Feel free to contact me and I'll give you some tips.

Thanks dude! I did learn a lot during the time I accepted this and now, so I should be able to do some awesome stuff. But I will definitely keep you in mind.

[Magazine]

 

[Mitchell]

Well Magazine. What are we going to do? I will remove my negative rep. if you do too.

[Mitchell]

Damn dude, another negative rating? I asked you how we are going to continue this and I was willing to remove my trust ratting on your page / fix the script for you. But instead you ignore me and gave me another negative rating. You really are childish.

Your trust rating is funny though.

Scammer, don't deal will try rip you off with bad web designs.

You picked that theme, remember? Or should I make a printscreen of that message?

I really wonder why you are doing this. I mean, I even added the widget part (which was not part of our agreement) just because I could.

[Magazine]

Damn dude, another negative rating? I asked you how we are going to continue this and I was willing to remove my trust ratting on your page / fix the script for you. But instead you ignore me and gave me another negative rating. You really are childish.

Your trust rating is funny though.

Scammer, don't deal will try rip you off with bad web designs.

You picked that theme, remember? Or should I make a printscreen of that message?

I really wonder why you are doing this. I mean, I even added the widget part (which was not part of our agreement) just because I could.

I liked the design but the script didn't work it would just flash and fuck up.

[Mitchell]

Damn dude, another negative rating? I asked you how we are going to continue this and I was willing to remove my trust ratting on your page / fix the script for you. But instead you ignore me and gave me another negative rating. You really are childish.

Your trust rating is funny though.

Scammer, don't deal will try rip you off with bad web designs.

You picked that theme, remember? Or should I make a printscreen of that message?

I really wonder why you are doing this. I mean, I even added the widget part (which was not part of our agreement) just because I could.

I liked the design but the script didn't work it would just flash and fuck up.

greyhawk already said it doesn't and I even explained the flickering. I also told you that if you said something, I would have fixed it. But you didn't, ignored my messages and gave me negative reputation out of the blue. Stop acting childish.

[Magazine]

Damn dude, another negative rating? I asked you how we are going to continue this and I was willing to remove my trust ratting on your page / fix the script for you. But instead you ignore me and gave me another negative rating. You really are childish.

Your trust rating is funny though.

Scammer, don't deal will try rip you off with bad web designs.

You picked that theme, remember? Or should I make a printscreen of that message?

I really wonder why you are doing this. I mean, I even added the widget part (which was not part of our agreement) just because I could.

I liked the design but the script didn't work it would just flash and fuck up.

greyhawk already said it doesn't and I even explained the flickering. I also told you that if you told me that, I would have fixed it. But you didn't, ignored my messages and gave me negative reputation out of nowhere. Stop acting childish.

 

[Mitchell]

Damn. You are pathetic. Spamming my trust rating won't help you. I already said that I am willing to fix all the bugs. I just don't trust you anymore and I doubt that you will pay me if I fix the bugs.

[Magazine]

Damn. You are pathetisch. Spamming my trust rating won't help you. I already said that I am willing to fix all the bugs. I just don't trust you anymore and I doubt that you will pay me if I fix the bugs.

I'm fine, you took too long to sort out my site so I am over it now.


Have a great day sir.

[Mitchell]

It's the other way around and I already proved that. You ignored me. I asked you multiple times if something was wrong, if we could work something out and so on. But oh well.

Have a great life.

[Magazine]

Thanks sir!

[CoinDiver]

I find it interesting that you accuse two forum members of being scammers in your signature, but did not take the opportunity to use those lines to link to any discussion supporting your accusations.