Help Rab With Coursework II - Destructive Testing

[Rab]

Destructive Testing
This is where you get to try and break my website. Find whatever errors you can and post them here. Whoever finds more errors wins. You have until Wednesday.

Ready, Set, Go!

PS: If you registered a sensible account, you can probably log in using the same account.

[ZeUs!!]

Extensive testing has conclusively proved your site is not immune to DDOS attacks

[WuTang420]

i didnt try to destroy it or anything i just searched for as many different combinations of flights as i could in 30 mins and it seemed to work just fine!

[Zemyla]

Why do I have to put the earliest time in seconds that the flight should be available?

[Ewan]

The website tells me there should be a menu, but there isn't

[Send]

ill try autospamming the registration later

[Rab]

The website tells me there should be a menu, but there isn't

Did you register?

If you did: try to register again, and see if the same happens, and tell me the details you entered into the form. If you'd rather not post the details here, drop me an email

Thanks.

[Sleepy Weasel]

Nothing really broke for me but if you want some opinions on stuff I'll give you some things that bothered me.

I entered a name,username,and password and registered. Then I tried registering again as a different person but with the same username and it correctly picked up on that and told "may already be taken, try a different username" by the username field, but it also gave me the "you may already have an account" error text over the full name field. If that was done intentionally I think that's more confusing than helpful. If you enter a username that already exists the only error message you should receive is the "may already be taken, try a different username" message. Or else if they are a new user they'll think they have to change both name and username fields, which isn't true.

I don't know if you care but I guess your check for telephone number just checks that at least 7 characters are entered. Which means I can enter something like this "abcdefghi" for my telephone number. If it was me I'd throw a regular expression on that form, but that can get tricky with extensions and stuff so maybe not. I find the easiest way to enter phone numbers and guarentee they are in a valid format is have like 4 input text boxes ([ ]) []-[] ext[]. With a max 3 digits in the first box, 3 in the second, 4 in the 3rd and 4 in the fourth. But I don't know if that's a good idea or not. I suppose I should point out here I have no idea how European phone number work.

Also when you click your links it looks like it displays an alternate version of the page for a split second. It has like a purple border around the header and it looks like maybe it's missing all the css on it maybe? I don't know, you only see it for a split second, but it's annoying.

Also when I pick a from and to for the airport and enter times and it comes back with "we do not currently offer any flights on that route, please try a different route" I'd prefer it kept my information stored in the forms so I didn't have to start over from scratch to try something else.

And you should definitely get rid of forcing them to enter hour:min:seconds. At least just have them enter hour:min and default the seconds to 00.

I couldn't get any flights to actually show up, so I don't know if this is feasable based on how many flights would show up or not, but what would be easiest for the user is just picking from:, to:, and then entering the start date and just showing everything from that date on for a set amount of length, which they could change if they need to see more.

Or maybe just enter the date as text and use a pull down menu to select the time (hour). I just know entering in something like 2004-10-19 10:23:54
is not something I feel like doing.

If we want to get extremely nitpicky, and why not, I'd probably put username and password as the first two input fields in the registration form instead of the last two. And if clicking on "register below" brought focus to the Full Name text field that would be nice.

Ok here is something else that bothered me, the picture is clickable and returns you to the index. Alright fine. But what bothers me is the clickable area is like that whole big rectangle so if you are trying to click on the register button and miss slightly you click on the blank part of the picture instead and get linked back to the page. I'd just prefer that picture wasn't clickable.

Anyway, yeah the site is good. I couldn't mess it up.

[Send]

http://www.acunetix.com/vulnerability-scanner/

You might get something out of it.

[Ilya]

if you put in

Panda Airways is a small airline company operating domestic flights in Pandaland. It has scheduled flights to and from ten of the country's local airports, two of which are international. Currently, its airway fleet consists of 2 Boeing 747 aircraft, 5 Boeing 757 aircraft and 10 Boeing 737 aircraft. The airline applies and successfully won the rights to operate scheduled flights to and from three international airports in the UK: London Heathrow, Birmingham and Manchester. It can also operate flights to and from three gateways in the UK but this must be via any of its UK gateways. The airline does not provide multi-leg journeys at present. Thus, customers travelling to any of the county's local airports from Manchester can only fly to one of its international airports and make an onward booking on arrival.

for the username/password, you get this error:

[Ewan]

Can't remember the exact details, but the involved using alt + num to make characters like úÇŽ

[Hakaku]

It won't let me book any flights >_<

[Rab]

Nothing really broke for me but if you want some opinions on stuff I'll give you some things that bothered me.

I entered a name,username,and password and registered. Then I tried registering again as a different person but with the same username and it correctly picked up on that and told "may already be taken, try a different username" by the username field, but it also gave me the "you may already have an account" error text over the full name field. If that was done intentionally I think that's more confusing than helpful. If you enter a username that already exists the only error message you should receive is the "may already be taken, try a different username" message. Or else if they are a new user they'll think they have to change both name and username fields, which isn't true. It's not just the same name, but the ENTIRE same details. ie. same name, address, phone number, ... you get the idea )

I don't know if you care but I guess your check for telephone number just checks that at least 7 characters are entered. Which means I can enter something like this "abcdefghi" for my telephone number. If it was me I'd throw a regular expression on that form, but that can get tricky with extensions and stuff so maybe not. I find the easiest way to enter phone numbers and guarentee they are in a valid format is have like 4 input text boxes ([ ]) []-[] ext[]. With a max 3 digits in the first box, 3 in the second, 4 in the 3rd and 4 in the fourth. But I don't know if that's a good idea or not. I suppose I should point out here I have no idea how European phone number work. People have all sorts of funny ways of writng phone numbers, in the US they use letters !

Also when you click your links it looks like it displays an alternate version of the page for a split second. It has like a purple border around the header and it looks like maybe it's missing all the css on it maybe? I don't know, you only see it for a split second, but it's annoying. It's called the FOUC - http://www.bluerobot.com/web/css/fouc.asp , If I was being marked on web design i'd fix it.. but it's not important for this piece of work.

Also when I pick a from and to for the airport and enter times and it comes back with "we do not currently offer any flights on that route, please try a different route" I'd prefer it kept my information stored in the forms so I didn't have to start over from scratch to try something else. Very Valid Suggestion

And you should definitely get rid of forcing them to enter hour:min:seconds. At least just have them enter hour:min and default the seconds to 00. Very Valid Suggestion

I couldn't get any flights to actually show up, so I don't know if this is feasable based on how many flights would show up or not, but what would be easiest for the user is just picking from:, to:, and then entering the start date and just showing everything from that date on for a set amount of length, which they could change if they need to see more. There are some flights in there, but as it says... perhaps not on that route or within that date range!

Or maybe just enter the date as text and use a pull down menu to select the time (hour). I just know entering in something like 2004-10-19 10:23:54
is not something I feel like doing.

If we want to get extremely nitpicky, and why not, I'd probably put username and password as the first two input fields in the registration form instead of the last two. And if clicking on "register below" brought focus to the Full Name text field that would be nice.

Ok here is something else that bothered me, the picture is clickable and returns you to the index. Alright fine. But what bothers me is the clickable area is like that whole big rectangle so if you are trying to click on the register button and miss slightly you click on the blank part of the picture instead and get linked back to the page. I'd just prefer that picture wasn't clickable. Once again, not marked on web design

Anyway, yeah the site is good. I couldn't mess it up.

Thanks a lot Sleepy, that's a big help, cheers m8.

[Rab]

if you put in for the username/password, you get this error:

Oh yeah, so you do. At first glance I cant see why though!
Any ideas?

[Rab]

It won't let me book any flights >_<

What flights are you trying to book?