PDA

View Full Version : getImageEXIF with new API


devbobo
Mar-06-2005, 03:56 PM
I have been playing with the getImageEXIF method on the new API, and I keep getting 'Invalid User' when I pass the current SessionID.

However, I found something interesting, it seems if you pass null as the sessionID, the function returns correctly.

Weird http://dgrin.com/images/smilies/icon10.gif

David

Nikolai
Mar-06-2005, 04:13 PM
I have been playing with the getImageEXIF method on the new API, and I keep getting 'Invalid User' when I pass the current SessionID.
However, I found something interesting, it seems if you pass null as the sessionID, the function returns correctly.
Weird http://dgrin.com/images/smilies/icon10.gif
DavidGood job, thanks for sharing!:thumb

By null you mean empty string? I mean, your request would have something like
<param></param>




</PARAM></P>instead of


<param>1231g23812h31928312h</param>? </P>Or you skipping the whole parameter "line"?

Cheers!:1drink

devbobo
Mar-06-2005, 04:29 PM
I may have been a bit hastey when I said returning 'correctly', the responseXML return is empty as below...
&lt;?xml version="1.0" encoding="iso-8859-1"?&gt;
&lt;methodResponse&gt;
&lt;params&gt;
&lt;param&gt;
&lt;value&gt;
&lt;string/&gt;
&lt;/value&gt;
&lt;/param&gt;
&lt;/params&gt;
&lt;/methodResponse&gt;

At least it doesn't return a "invalid user", note this seems to only work for a certain period of time of I log out.

nikolai...by null I mean...
&lt;param&gt;&lt;value&gt;&lt;string&gt;&lt;/string&gt;&lt;/value&gt;&lt;/param&gt;

Also, found that 'getImages' returns completely the correct data when null is passed as the SessionID.

Cheers,

David

Nikolai
Mar-06-2005, 04:47 PM
I may have been a bit hastey when I said returning 'correctly', the responseXML return is empty as below...
<?xml version="1.0" encoding="iso-8859-1"?>
<methodResponse>
<params>
<param>
<value>
<string/>
</value>
</param>
</params>
</methodResponse>

At least it doesn't return a "invalid user", note this seems to only work for a certain period of time of I log out.

nikolai...by null I mean...
<param><value><string></string></value></param>
Also, found that 'getImages' returns completely the correct data when null is passed as the SessionID.

Cheers,

David
Thanks!
frigging VB, cannot show xml tags properly..

It looks like null session ID can be a serious security breach. User ID is realy easy to get a hold of.. Don, if you're reading this, I would personally ask for a favor to close these "door" immediately..

Thanks for sharing, David!

Nikolai
Mar-06-2005, 04:53 PM
to get xmls tag show as a normal text?

I may have been a bit hastey when I said returning 'correctly', the responseXML return is empty as below...
<?xml version="1.0" encoding="iso-8859-1"?>
<methodResponse>
<params>
<param>
<value>
<string/>
</value>
</param>
</params>
</methodResponse>

onethumb
Mar-06-2005, 05:09 PM
Thanks!
frigging VB, cannot show xml tags properly..

It looks like null session ID can be a serious security breach. User ID is realy easy to get a hold of.. Don, if you're reading this, I would personally ask for a favor to close these "door" immediately..

Thanks for sharing, David!

There's no "door". It's just treated as if it's an anonymous login.

Don

onethumb
Mar-06-2005, 05:11 PM
I have been playing with the getImageEXIF method on the new API, and I keep getting 'Invalid User' when I pass the current SessionID.

However, I found something interesting, it seems if you pass null as the sessionID, the function returns correctly.

Weird http://dgrin.com/images/smilies/icon10.gif

David

Fixed, I think.

Don

devbobo
Mar-06-2005, 05:35 PM
Fixed, I think.

Don
Thanks Don http://dgrin.com/images/smilies/icon10.gifhttp://dgrin.com/images/smilies/icon10.gif

Nikolai
Mar-06-2005, 05:38 PM
There's no "door". It's just treated as if it's an anonymous login.
DonThanks for the response!

I guess if this were mentioned in the help section we would not have this issue raised at all:-) Just a thought:-)

Have a good night!

Cheers!:1drink (taking another sip of 30 yo port:-)

Nik