Crappy server panel code

cartman82

Tried to log into a server panel. Immediately get "Session timed out" and am kicked out.
Try IE, Firefox. The same.

Let's see if we can hack something...

OMG. The code.

dahaka

I cannot imagine the reason behind this...

Let me get the XML
Oh wait the response is actually HTML
ABORT ABORT

Maciejasjmj

@dahaka said:

Let me get the XML
Oh wait the response is actually HTML
ABORT ABORT

Might be making some sense if you're working against something like Discourse (well it's JSON here, but still), where endpoints normally send you structured data, but on errors they have a chance of sending you:

a) structured JSON with an error
b) a failed attempt at structured JSON with an error
c) a dump of the standard exception handling page

Filed under: and no, the content headers won't save you

gleemonk

That's so bad, maybe it's contagious? Maybe you were real lucky when it didn't let you log-in.

dkf

It could be worse. It could upload the error message to an FTP site and send you back a plain old HTML page telling you to go and download the document from that site. (I have seen such things in the wild.)