Press "Enter" to skip to content

Tag: mssql

B0rken eBay Express

Broken Ebay ExpressI was just poking around eBay earlier and I came across mention of “eBayExpress” and thought it’ll be interesting to sign up. So I tried to – but hit a load of debug information.

Interesting stuff: eBay Express appears to run in PHP (as can be confirmed in the URL), but it runs on Microsoft SQL Server (as can be evidenced by the MS SQL/mssql mentions in the error messages) and they use the “sa” (super administrator) account to login to the MS SQL server: a big no no in any security aware programmer’s book. They also have the web server running on the same server as the database server (as evidenced by the “Unable to connect to server: localhost” section) and they keep everything in nice distinct files. They also have warnings turned on on their server.

Interesting stuff (for a techy like me!).

[added]

Steps to replicate: