.CN Monopoly

**Mr.Bill** · 22 January, 2009, 15:34 PM

I am sure I read Will has the ability to block ip, pub, nameserver, url and extensions.

The system works as it blocked out all mine. Be curious to what is the cause is so I can be sure to have it looked at on my set up if it applies. Really wonder if its the translator breaking something.

Now if we could only submit https sites

**Will.Spencer** · 22 January, 2009, 15:52 PM

Originally Posted by Aquarezz

Isn't it with any special link?
Or maybe by adding www, or without etc?

Or because of the .cn/ and not .cn ?

None of those. He's submitting to the normal URL, with or without www, with and without appending the /.

**Aquarezz** · 22 January, 2009, 15:55 PM

I might know it, don't know it for sure though...
You know there is a code, like when you have:
Cäm.Com, when you wanna register it, it's this to register: http://xn--cm-via.com/

Maybe he does the same with a combination for his .cn?

Or isn't that possible?

I'm thinking about other ways now too... as this is interisting..

Greetz

**Will.Spencer** · 22 January, 2009, 16:07 PM

I finally set up the packet capture that I should have done months ago.

Code:

proxy=http%3A%2F%2Fwww.fast-web-proxy.Cn%2F&hint=http%3A%2F%2Fwww.fiveproxy.cn%2F&cat_id=51&email=sdgs@epwing.com

d'oh! It's looks like out block code is case sensitive.

We didn't see this, because we convert the data to all-lowercase before we save it.

We need to swap the order of those functions...

I know that I tested this in the past, so this bug was introduced in some changes we made.

More darkly humorous: It's actually impossible to enter uppercase characters into the domain blacklist.

**trizi** · 23 January, 2009, 17:29 PM

Originally Posted by Will.Spencer

I finally set up the packet capture that I should have done months ago.

Surely, fwrite var_dump($_POST) and then grepping through it would have been less hassle

Originally Posted by Will.Spencer

Code:

proxy=http%3A%2F%2Fwww.fast-web-proxy.Cn%2F&hint=http%3A%2F%2Fwww.fiveproxy.cn%2F&cat_id=51&email=sdgs@epwing.com

d'oh! It's looks like out block code is case sensitive.

We didn't see this, because we convert the data to all-lowercase before we save it.

We need to swap the order of those functions...

I know that I tested this in the past, so this bug was introduced in some changes we made.

More darkly humorous: It's actually impossible to enter uppercase characters into the domain blacklist.

Its fun when these bugs creep into things, a proper Doh moment!