[theymos] Bug with Merit (for sending)

[tranthidung]

I typed 1\ when I want to send 1 merit and it works.

To test it again, I typed 1/ and it works too.

Tested it again with 1~, and it works too.

Can these ones be considered as bugs with Merit button?

Please check it theymos.  

I guess the box should accept number only, not string.

You know, one idea pops up in my head, and I want to hijack the merit system by using exponential but it does not work.

Code:

2^2

It only allows me to send 2 merit, not 4. 

[1714748983]

1714748983

[1714748983]

1714748983

[TryNinja]

Is it a bug, though?

I just merited you with:

Code:

1-.

Seems like it just ignores everything that isn't a number, which feels like the ideal behavior.

If I ever see a super B post I'll try something like "1-.0" to see if it sends 10 merits.

[tranthidung]

Is it a bug, though?

I just merited you with:

Code:

1-.

Seems like it just ignores everything that isn't a number, which feels like the ideal behavior.

I don't know but I knew there was a bug with negative number when sending merit, in early hours or days of merit system.

Seems like theymos fixed it and caused other bugs! 

A few leftovers from the bug:

https://bitcointalk.org/index.php?topic=2818350.msg28857781#msg28857781 (negative merit)
https://bitcointalk.org/index.php?topic=2818350.msg28857729#msg28857729 (zero value merit)
https://bitcointalk.org/index.php?topic=2818350.msg28857682#msg28857682 (negative merit)

It's actually gone, those are just cached.

[KingsDen]

Is it a bug, though?

I just merited you with:

Code:

1-.

Seems like it just ignores everything that isn't a number, which feels like the ideal behavior.

If I ever see a super B post I'll try something like "1-.0" to see if it sends 10 merits.

Then I tried the opposite

Code:

-1

And it says invalid. This means "-" placed at the left side makes a number but at the right side is just a sign.

[tranthidung]

Then I tried the opposite

Code:

-1

And it says invalid. This means "-" placed at the left side makes a number but at the right side is just a sign.

Please read my above post, the quote block.

For negative merit number, it was reported as a bug, and theymos fixed it. Makes sense if now you can not send any negative merit to demerit other users.

[BitcoinGirl.Club]

You know, one idea pops up in my head, and I want to hijack the merit system by using exponential but it does not work.

Code:

2^2

It only allows me to send 2 merit, not 4. 

A text input box is not a calculator LOL.

[SmartGold01]

You know, one idea pops up in my head, and I want to hijack the merit system by using exponential but it does not work.

Code:

2^2

It only allows me to send 2 merit, not 4. 

Lols.. You should know the system isn't configured that way.
I have never tried it but for my understanding the merits button is only powered to be sending 1, 2, 3, 4, 5,6,7,8,9, 10+ and above merits, and not by multiplications or exponentially.
So, do you think theymos would accepts putting that way you think?

[Faisal2202]

Seems like it just ignores everything that isn't a number, which feels like the ideal behavior.

If I ever see a super B post I'll try something like "1-.0" to see if it sends 10 merits.

This shows that you guys are rich with merits haha, as speaking of myself, when I wanted to give someone merit, I don't do such experiments with the feat or lose all the smerits, as I have seen cases where we send merits accidentally by reloading the page. I would never do such experiments but until I have good amount of smerits.

And yeah OP you are right, the field should accept numbers only, but they are not accepting anything other than numbers than that's also fine. But still for the sophistication of the forum as its growing day by day, some changes are must. Admins should remain more active.

[dkbit98]

Is it a bug, though?

I merited you with 1% and it worked

If I ever see a super B post I'll try something like "1-.0" to see if it sends 10 merits.

This won't work.
I tried sending tranthidung 0-1 and 1-.0 merits and it didn't work showing invalid amount error.
It's not ignoring all other characters if they are written between two or more numbers.

[dzungmobile]

This won't work.
I tried sending tranthidung 0-1 and 1-.0 merits and it didn't work showing invalid amount error.
It's not ignoring all other characters if they are written between two or more numbers.

It seems theymos only excluded - (for negative value) when he fixed that bug in 2018. For other characters, they all work. My guess only because I can not test all of them as it will force me to send out many merit.

When I tried with

Code:

1+0

It worked because you receive 1 merit from me.

[un_rank]

^ I just sent out my last smerits while testing if 1-2 is accepted by the algorithm and apparently it is.

This shows that you guys are rich with merits haha, as speaking of myself, when I wanted to give someone merit, I don't do such experiments with the feat or lose all the smerits,

If you have low smerits you can still test it out, just make sure you start with a number higher than the number of smerits you have. If it's accepted by the system it will tell you you don't have enough smerits but if it's not, it'll show "invalid amount"

If I ever see a super B post I'll try something like "1-.0" to see if it sends 10 merits.

Super B

- Jay -

[criptoevangelista]

Friends, I suggest you test several things, there may be some hidden code that releases more merits for you. Try it right here in my post, feel free  






_{(don't take this post seriously)}

[Sandra_hakeem]

I'd barely get distracted by the least, imperceptible thing like this... ^{[a bug that doesn't obstructe my route when navigating the forum]}... Well, that shows how attentive alot of people can be, kudus TTD!
The only time I was able to detect anything that looks like a bug so fast was when I sent some merit out, refreshed the page and it repeated exactly the same command ^{[without showing up a dialogue box]}. I think that was fixed anyways!

Code:

2^2

A text input box is not a calculator LOL.

lol ...uhhh, is he part of the code writers we've got? How did he immediately think of the exponentials? Hahahaha!

[pinggoki]

This just gave me an idea and now I'm wondering how a lot of you guys do the merit thing, it's a really way to test out if there's going to be a bug, I can imagine someone trying those script kiddies SQL injections, I mean that would be happening right? Unless of course there's a limit to what can be the number of characters that you can put in that box. Imagine doing some equations in that, let's see what number's going to get registered.

[hugeblack]

We cannot describe it as a bug, since the definition of a bug is an unexpected problem when execution, and since the results here are correct and expected, it is the way the code is executed.

It is better give an error message if sending box contain anything other than numbers, but what happens is that the first numbers are executed and the following values are ignored.

Seems like it just ignores everything that isn't a number, which feels like the ideal behavior.

I think it ignores anything after the number if it is not a number, since 1~.0 is 1, not 10, and so on.

[BlackHatCoiner]

I found the bug in the bug:

Code:

\1

'\' probably ignores the character next to it.

[PowerGlove]

Hehe, this is not a bug, it's just how PHP handles string -> number conversions. (If I had to guess, I'd say that there's an (int) cast happening on $_POST['merits'].)

Interestingly, the rules allow for scientific notation (more specifically: E notation), so something like 2e1 means 2*10^1 = 20 merits. Even in the context of an (int) cast, I think the leading number can have a decimal point, so another way to send someone 20 merits would be to send them 0.02e3 merits.

[SickDayIn]

I typed 1\ when I want to send 1 merit and it works.

To test it again, I typed 1/ and it works too.

Tested it again with 1~, and it works too.

Can these ones be considered as bugs with Merit button?

Please check it theymos.  

I guess the box should accept number only, not string.

You know, one idea pops up in my head, and I want to hijack the merit system by using exponential but it does not work.

Code:

2^2

It only allows me to send 2 merit, not 4. 

This wouldn't be considered a bug as there is no impact.  Whether or not you add the the /, \, or ~, the total merit sent does not change. It could be considered that there is insufficient input validation, and maybe the merit sender should only accept numerical entries both client side and server side. However regardless it seems to be stripping anything posted after the integer specified. It's important to only raise bugs that have an actual impact and at this stage it's negligible.

[LoyceV]

another way to send someone 20 merits would be to send them 0.02e3 merits.

Lol. I've reached my monthly limit, so all I could send you was 0.002e3 Merits.

[Jet Cash]

I can tell you guys are computer ??s. Anywhere else people would just be using digits. Hasn't anybody tried to use the infinity symbol to give the maximum?