Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Overreacting HF Security - weird issue with a character combination

The HF security features are a bit trigger happy. I get the big You Have Been Blocked error a few people have been getting recently if I type the following anywhere in a post or PM: [Image: dA3DjL3.png]

You can swap the ' for a " and reduce the "something" to "sing" and still get the issue. For example here are some other combinations that trigger the response. You can put letters (not numbers) in between or after SING (and after AND) and still get the problem.

[Image: MwYjrwn.png]

I'm sorry I'm not entirely clear about what causes the problem, but that's largely because I don't understand why the security features are being triggered (I also haven't slept in about 32 hours so that probably is contributing to my incoherency).

I've tested and confirmed this problem in PMs, posts, thread titles, and even rep. I've also had two people from entirely different parts of the world test and experience the same issue.

Edit: This is what i was trying to post originally that gave the problem: http://pastebin.com/mUceUbge

[Image: 2wAf2IN.gif]
I can confirm this does block me as well.
Very odd.
(Nov 12, 2013 03:05 AM)Emylbus Wrote:  I've also had two people from entirely different parts of the world test and experience the same issue.

Reppin' Aus.

And yes, I did experience the exact same error as Emy; strange.
Happens to me as well.

Probably triggering the SQL security system.
(Nov 12, 2013 03:12 AM)PsychoSexy Wrote:  Happens to me as well.

Probably triggering the SQL security system.

That's what I figured, I guess I just don't know enough about SQL to understand why that particular combination is causing problems. The issue is that it's not a bizarre combination of words, quoting someone and then following it with "and something like that" (I was able to type that because there wasn't a space after the first quotation mark)

[Image: 2wAf2IN.gif]
I agree that it's common words, but I don't see this "event" in need to be fixed. You can always use brackets instead.

The "event" happens becausethe " mark and the word AND is SQL syntax.
(Nov 12, 2013 03:24 AM)PsychoSexy Wrote:  I agree that it's common words, but I don't see this "event" in need to be fixed. You can always use brackets instead.

The "event" happens becausethe " mark and the word AND is SQL syntax.

What do you mean use brackets? That doesn't make sense when quoting something.

[Image: 2wAf2IN.gif]
(Nov 12, 2013 03:27 AM)Emylbus Wrote:  What do you mean use brackets? That doesn't make sense when quoting something.

I realize, but I just don't believe this issue will be fixed.
(Nov 12, 2013 03:30 AM)PsychoSexy Wrote:  I realize, but I just don't believe this issue will be fixed.

What I am hoping for is with the recent issues with other false positives of people posting actual code snippets, Omni will see this and take a look at fixing it. Hope for the best, right?

[Image: 2wAf2IN.gif]
(Nov 12, 2013 03:32 AM)Emylbus Wrote:  What I am hoping for is with the recent issues with other false positives of people posting actual code snippets, Omni will see this and take a look at fixing it. Hope for the best, right?

It's a small price to pay for security. It seems that the system works on detecting keywords. I don't think Omni should fix the issue because it will create a detrimental security issue as a whole.
For a better today.
(Nov 12, 2013 03:32 AM)Emylbus Wrote:  What I am hoping for is with the recent issues with other false positives of people posting actual code snippets, Omni will see this and take a look at fixing it. Hope for the best, right?

Always. Hoping he'll notice this and give some info.
Maybe the issue will be tweaked soon, but like ๖ۣۜParazyd said, there's probably not much we can do on this since the forum is run on SQL. I don't think there's an honest fix around this. I myself haven't experienced this issue, but it sounds pretty annoying! Best of luck to getting this issue resolved.
https://hackforums.net/showthread.php?ti...id36179080

That's what Omni says on it.
(Nov 12, 2013 04:15 AM)Daz-1337- Wrote:  https://hackforums.net/showthread.php?ti...id36179080

That's what Omni says on it.

Yes, but I believe he said that when he thought the issue was just with people posting snippets of code. He said somewhere else, but for the life of me I can't find the post, that he'd tinker with the rules if it was making a bunch of false positives.

[Image: 2wAf2IN.gif]
I just got this issue!
I wish I could show you what I put, but it was a LONG post, now I really hope this gets resolved! That was pretty frustrating to come and find I've been blocked by CloudFlare. For a second, I thought I was actually blocked from HackForums!


Possibly Related Threads...
Thread / Author Replies Views Last Post
by FiftyTwoOct 22, 2016 09:37 AM 3 215 Oct 22, 2016 09:37 AM
Last Post: Ja.son
by _r00tDec 13, 2015 12:48 PM 7 378 Dec 13, 2015 12:48 PM
Last Post: Omniscient
by BLKLXVESMATTER!Feb 6, 2015 04:33 AM 6 98 Feb 6, 2015 04:33 AM
Last Post: Cyaddd