Call for help - website testing

[stevegula]

So I like fantasy sports.. but the site I use for MotoGP fantasy racing is totally dicked up. The solution? Write my own (which will also support damn near every other racing league on the planet eventually, but goal #1 is MotoGP before the season starts).

Could I get people to go to my testing site and try to break it? (and document your efforts and share them with me. You'll find a lot of output at the bottom of each page that would be helpful to me if you run into a problem).

Really bad testing plan:
1) Join ( try to break it as well )
2) Create a league ( try to break it ) ( You can have/participate in multiple leagues )
3) Join the league / create a team ( try to break it )
4) Try to create multiple teams within the league. (You can only have one team in each league)
5) Try to invite (I'll admit right now this feature is incomplete. It only tells you the people it successfully emailed and doesn't report back which email addresses were invalid).
6) If you know how, submit false POST data and try your hand at some SQL injection. There's plenty of DB info in the profiler output on the bottom of each page to help.

URL is <!-- m --><a class="postlink" href="http://gpmanager.sg-techconsulting.com">http://gpmanager.sg-techconsulting.com</a><!-- m --> . Site authentication is guest / guest , after that you'll have to create an account.

I know the general look and feel is ugly but I'm a programmer not a designer. And right now the design is the 'basic' format so that cellphones / mobile browsers have zero issues. The "final" version will use a lot of javascript (jquery UI) for prettiness.

even if you're not technically inclined, if y'all could just sign up and register and create some teams and such it'd be helpful to have sample data to work with (that hasn't been create/randomized by me).

In exchange I'll make a donation to MM proportionate to the number of people helping out. Thanks.

BTW, please use fake passwords that you don't use for anything else. But know that user passwords are hashed and salted so all I ever see is something along the lines of 'eb57d59768078dc30e9077335dfd0b66758d79c0476b784ef 1'.

Known Issues:
Rank does not work.
Password reset does not work (haven't even coded it yet).

(also posted here - <!-- m --><a class="postlink" href="http://www.2darkpark.com/vbulletin/showthread.php?t=19268">http://www.2darkpark.com/vbulletin/show ... hp?t=19268</a><!-- m --> )

[Evan]

looks cool. Im planning on doing my own Fantasy football realtime stat tracker sometime before next season (because spending hours coding is somehow better than paying for yahoo stat tracking)

anyway, when I try to set my lineup it errors out

as for sql injection, i havent tried any yet but are you using parameterized queries?

[Evan]

here is the dump.

Unable to Complete Request
You can go to the home page or try again.
Benchmarks Time Memory
Kohana Loading 0.014 0.42MB
Environment Setup 0.003 0.04MB
System Initialization 0.007 0.12MB
Controller Setup 0.021 0.29MB
Controller Execution 0.148 0.27MB
Total Execution 0.041 0.83MB
Queries Time Rows
SELECT `users`.* FROM `users` WHERE `users`.`id` = 6 ORDER BY `users`.`id` ASC LIMIT 0, 1 0.000 1
SELECT `league_teams`.* FROM `league_teams` WHERE `league_teams`.`lt_id` = '5' ORDER BY `league_teams`.`effdate` DESC LIMIT 0, 1 0.000 1
Total: 2 0.001 2
POST Value
manufacturer_id 3
team_id 7
pilot1_id 4
pilot2_id 5
pole 2
first 1
second 3
third 17
lt_id 5
submit Submit
Cookies Value
kohanasession 498817743b6c3fbb0918c4cbe94181c2
Session Value
session_id 498817743b6c3fbb0918c4cbe94181c2
total_hits 39
_kf_flash_ Array
(
)

user_agent Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB5; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
ip_address 71.178.112.74
last_activity 1237608974
auth_user User_Model [object]
redirect league/view/6

[Evan]

btw, from the debug data, are you doing a separate query for every user, league and gps?

[stevegula]

btw, from the debug data, are you doing a separate query for every user, league and gps?

?

There's some query caching involved so queries that looked like they're being called 5 times are only getting called once and the framework caches it.

I've been away from a computer since Friday, sorry for the late response.

*edit* heh, nub mistake. One of my extensions to the framework didn't have a file named properly (case sensitivity ftw). Teams can save again.