Forum Settings
Forums
New
Apr 21, 2014 1:53 AM
#1
Offline
Jul 2018
564612
Looks like I found a bug. In fact, there is a way that someone can rate show 11 or even 255! Look here: http://myanimelist.net/anime/12483/Gregory_Horror_Show:_The_Last_Train/stats or here: http://myanimelist.net/anime/1535/Death_Note/stats

I think we need constraints in database or something like that to prevent this from happening.
Apr 21, 2014 1:56 AM
#2

Offline
Mar 2012
440
Wow... Gregory Horror Show: The Last Train goes straight to rank #2 on MAL..
Apr 21, 2014 1:58 AM
#3

Offline
Jan 2009
92445
lol that is MAL for you full of exploited programming bugs, try PMing Kineta she is the Database Administrator and can contact Crave Online or Xinil the only programmer of MAL
Apr 21, 2014 2:01 AM
#4
Offline
Jul 2018
564612
> Wow... Gregory Horror Show: The Last Train goes straight to rank #2 on MAL..

Yeah, that's how I found that bug.
Apr 21, 2014 2:02 AM
#5

Offline
Oct 2008
502
I've noticed this too..Saw it at least 3 times, can't remember where except for this one:

http://myanimelist.net/anime/19815/No_Game_No_Life/stats
Apr 21, 2014 2:03 AM
#6

Offline
Mar 2012
440
Apr 21, 2014 2:07 AM
#7

Offline
Jan 2009
92445
Andressina said:
The culprit maybe?
http://myanimelist.net/animelist/AnimeLov3r69


lol how did you even find that user? but great find
Apr 21, 2014 2:11 AM
#8

Offline
Mar 2012
440
j0x said:
Andressina said:
The culprit maybe?
http://myanimelist.net/animelist/AnimeLov3r69


lol how did you even find that user? but great find


He sorta bragged about it in this forum > http://myanimelist.net/forum/?topicid=1110293&show=0#post8
Apr 21, 2014 2:13 AM
#9

Offline
Jan 2009
92445
Andressina said:
j0x said:
Andressina said:
The culprit maybe?
http://myanimelist.net/animelist/AnimeLov3r69


lol how did you even find that user? but great find


He sorta bragged about it in this forum > http://myanimelist.net/forum/?topicid=1110293&show=0#post8


lol i see, i bet its SQL Injection http://en.wikipedia.org/wiki/SQL_injection

like what this user http://myanimelist.net/profile/jamespenguin did to get 1 million post count
Apr 21, 2014 2:18 AM

Offline
Apr 2009
5713
I remember Bake having a user that scored it 255 out of 10 as well. This is another reason why MAL staff and site security are a laughing stock right now.
Steel Ball Run anime when?
Apr 21, 2014 2:24 AM
Offline
Jul 2018
564612
I hope our passwords not stored in plain text or some easy-decodable format.
Apr 21, 2014 2:26 AM

Offline
Jan 2009
92445
Nidhoeggr said:
This is another reason why MAL staff and site security are a laughing stock right now.


agreed this website is close to being abandonware
Apr 21, 2014 2:27 AM

Offline
Nov 2012
15463
i'm just laughing at some unknown show suddenly turning #2
Apr 21, 2014 2:33 AM

Offline
Oct 2012
2533
I'm okay with this taking Steins;Gate's spot.
Apr 21, 2014 2:47 AM

Offline
Apr 2009
5713
sqrt said:
I hope our passwords not stored in plain text or some easy-decodable format.


The admin password is probably 12345Naruto.
Steel Ball Run anime when?
Apr 21, 2014 2:50 AM

Offline
Apr 2014
41
I'm not the one who originally did the score on the gregory horror show, but it's pretty easy to figure out.
IZEROII said:
If you legitimately enjoyed this as a series then I honestly believe you need to reevaluate your definition of entertainment because watching tin foil blow in the wind probably is a way you kill time.

SolviteSekai said:
Lol wish fulfillment. It's always been my wish to be a greasy lolicon with a mullet who plays Civ all day every day.

He got me.
Apr 21, 2014 2:55 AM

Offline
Apr 2014
41
*fixed*
IZEROII said:
If you legitimately enjoyed this as a series then I honestly believe you need to reevaluate your definition of entertainment because watching tin foil blow in the wind probably is a way you kill time.

SolviteSekai said:
Lol wish fulfillment. It's always been my wish to be a greasy lolicon with a mullet who plays Civ all day every day.

He got me.
Apr 21, 2014 3:02 AM

Offline
Jan 2009
92445
AnimeLov3r69 said:
*fixed*


if i were you i will spread the exploit and even report it on the support section of the forums so that Xinil will be alarmed and quickly fix the bug
Apr 21, 2014 3:06 AM

Offline
Apr 2014
41
Already talking to Kineta.
IZEROII said:
If you legitimately enjoyed this as a series then I honestly believe you need to reevaluate your definition of entertainment because watching tin foil blow in the wind probably is a way you kill time.

SolviteSekai said:
Lol wish fulfillment. It's always been my wish to be a greasy lolicon with a mullet who plays Civ all day every day.

He got me.
Apr 21, 2014 3:09 AM
Lead Admin
Faerie Queen

Offline
Aug 2007
6262
The stats pages should be fixed within the next 24 hours. Thank you for letting us know.

It's not SQL injection or anything harmful like that. But I will not share how it is done because I don't want to have to go around removing a bunch of troll anime lists with 10+ scores. Neither do you need to be worried about your passwords.

Finally, MAL's staff (aside from Xinil) has absolutely no control over the code on the site. You've been around long enough to know that by now, Nidhoeggr.
KinetaApr 21, 2014 3:12 AM
Apr 21, 2014 3:10 AM

Offline
Apr 2014
41
Also, a guy called Asiosmeta made an account today just to get Gregory Horror Show to number 1. There is also a Guy called MusicRush which was the first person to rate DeathNote 11.

http://myanimelist.net/animelist/asiosmeta
http://myanimelist.net/animelist/musicrush
IZEROII said:
If you legitimately enjoyed this as a series then I honestly believe you need to reevaluate your definition of entertainment because watching tin foil blow in the wind probably is a way you kill time.

SolviteSekai said:
Lol wish fulfillment. It's always been my wish to be a greasy lolicon with a mullet who plays Civ all day every day.

He got me.
Apr 21, 2014 3:12 AM

Offline
Jan 2009
92445
@Kineta

how about the million post count of this user - http://myanimelist.net/profile/jamespenguin

AnimeLov3r69 said:
Also, a guy called Asiosmeta made an account today just to get Gregory Horror Show to number 1. There is also a Guy called MusicRush which was the first person to rate DeathNote 11.

http://myanimelist.net/animelist/asiosmeta
http://myanimelist.net/animelist/musicrush


are you an ethical hacker? share your ways lol
Apr 21, 2014 3:19 AM

Offline
Mar 2013
234
why does anyone give a fuck
Full time redditor and fedora owner, gg
Apr 21, 2014 3:27 AM

Offline
Jan 2014
958
Considering how easy it is to do the trick, I don't think fixing stat page is enough (hint: go to your own animelist and click at the score). A certain someone should fix the code, that's how you make sure it won't happen again.
Apr 21, 2014 3:38 AM

Offline
Apr 2014
41
Anyone have any info on a guy named Formay? He seems to plan to watch 1/3 of all anime on this site and an equally proportional chunk of the manga yet has not seen a single show or read any manga at all?

http://myanimelist.net/profile/formay
IZEROII said:
If you legitimately enjoyed this as a series then I honestly believe you need to reevaluate your definition of entertainment because watching tin foil blow in the wind probably is a way you kill time.

SolviteSekai said:
Lol wish fulfillment. It's always been my wish to be a greasy lolicon with a mullet who plays Civ all day every day.

He got me.
Apr 21, 2014 4:03 AM

Offline
Dec 2011
8943
AnimeLov3r69 said:
Anyone have any info on a guy named Formay? He seems to plan to watch 1/3 of all anime on this site and an equally proportional chunk of the manga yet has not seen a single show or read any manga at all?

http://myanimelist.net/profile/formay


There's nothing wrong with that. Maybe he's just doing lots and lots of research into what to try before he starts on things?
There is no such thing as shit taste. Only idiots who think everyone should have the same taste as they do.
Apr 21, 2014 4:07 AM

Offline
Jan 2009
92445
kuuderes_shadow said:
AnimeLov3r69 said:
Anyone have any info on a guy named Formay? He seems to plan to watch 1/3 of all anime on this site and an equally proportional chunk of the manga yet has not seen a single show or read any manga at all?

http://myanimelist.net/profile/formay


There's nothing wrong with that. Maybe he's just doing lots and lots of research into what to try before he starts on things?


so just give him the benefit of the doubt even though it looks suspicious
Apr 21, 2014 4:12 AM

Offline
Dec 2011
8943
j0x said:


so just give him the benefit of the doubt even though it looks suspicious


Quite. It's not as though that account influences any of the stats other than boosting the popularity of each series by 1 person anyway. He doesn't have any scores/favourites etc.
There is no such thing as shit taste. Only idiots who think everyone should have the same taste as they do.
Apr 21, 2014 4:13 AM

Offline
Jan 2009
92445
kuuderes_shadow said:
j0x said:


so just give him the benefit of the doubt even though it looks suspicious


Quite. It's not as though that account influences any of the stats other than boosting the popularity of each series by 1 person anyway. He doesn't have any scores/favourites etc.


ye i get you... no harm, no foul

More topics from this board

» Backup

Vapor_AU - 9 hours ago

1 by pichipichiHiro »»
9 hours ago

Sticky: » Inactive Username Request Thread ( 1 2 3 4 5 ... Last Page )

Kineta - Sep 21, 2015

3368 by L2Dragon »»
11 hours ago

» ishinashi has 300 alt accounts and counting ( 1 2 3 )

deg - Jun 16, 2023

125 by traed »»
Yesterday, 4:53 PM

» MAL Export

Devileeee - Sep 25, 2023

3 by zororo12 »»
Apr 23, 3:52 AM

» Problem with API OAuth2 Authentication Login

bidgetfoss_4000 - Apr 23

0 by bidgetfoss_4000 »»
Apr 23, 3:44 AM
It’s time to ditch the text file.
Keep track of your anime easily by creating your own list.
Sign Up Login