Home  >  Community  >  Auctions.com  >  AU search updated ... ebayla nuked


<< previous topic post new topic post reply next topic >>
 neomax
 
posted on April 23, 1999 07:05:00 AM new
Search at Auction Universe has been updated and now allows for a search only of the title, of the title and description or of the full description alone.

We also added "Radio/TVs" to the collectible area.

Another improvement is the regular posting of site information, downtimes, auction extentions, etc. in a link from the opening page. It is called Site News. The www.auctionuniverse.com/au_sitenews.asp? will get you there.

AU has also disabled the use of javascript routines in AU auction descriptions. The move will defeat an attempt by any unscrupulous user that might seek to adapt and use a variation of the eBayla script to compromise the user id and password of AU users.

AU has also started including web publication of classified advertisements from our publishing affiliates. These listings are segregated from auction listings and there is no way for web users to place classified ads on AU other than through the placement of a classified ad with an affiliated publisher.

------------------
Neomax
[email protected]

 

 Brianc
 
posted on April 23, 1999 12:04:00 PM new
Can Peral Scripts still be used? I believe the example used was Javascript but the site also gave a Pearl Script that is much more effective and supposed to be harder to prevent??
 
 neomax
 
posted on April 23, 1999 12:47:00 PM new
Hi Brian:

My understanding is that we parse out all scripts. Standard HTML references, links, fonts, colors, images, etc. remain but scripts are eliminiated.
What I am told is that AU software will "remove all script tags and replace them with the text "We are sorry, but for
security reasons we cannot allow descriptions that contain scripting." However, I will pass along your concerns about variations of the Perl scripting language.

I've never used scripting in auctions myself although I have used it on some website development (primarily through FP98). My impression is that scripting, which could be used to play music, do some wild things with backgrounds, move type about, etc. also is not appreciated by most users who, whether we like it or not, prefer basic, straight-forward descriptions with informative text and small (byte-size) but nicely viewable pictures. Several threads on eBay outlook make this point.

From a practical (time-wise) standpoint, about the only auction items that it made sense to use scripting for are those that featured elaborate presentations for products when the seller plans to sell 10,000 over the next numerous months.

I would think is more an unnecessary "time-cost" to include scripts in items that are a one-off or unique collectible unless you were using a product like AuctionAddict.

I should add that while an "eBayla-type" script could be written to capture passwords on AU, the script published by "the because we can" folks doesn't work on AU without significant modification.

Still, in the hands of a practiced hacker, scripting can be used to do many nefarious things. That is a tremendous security threat that we as an auction site, cannot allow.

------------------
Neomax
[email protected]


 

 
<< previous topic post new topic post reply next topic >>

Jump to

All content © 1998-2026  Vendio all rights reserved. Vendio Services, Inc.™, Simply Powerful eCommerce, Smart Services for Smart Sellers, Buy Anywhere. Sell Anywhere. Start Here.™ and The Complete Auction Management Solution™ are trademarks of Vendio. Auction slogans and artwork are copyrights © of their respective owners. Vendio accepts no liability for the views or information presented here.

The Vendio free online store builder is easy to use and includes a free shopping cart to help you can get started in minutes!