[MTOS-dev] Trackback Bug?

[Reed A. Cartwright]

Byrne Reese wrote:
> I added both of these issues as bugs to be evaluated by the dev team.

As a follow up, I figured out the TCode issue, and it is related to 
duplicated ping control.

TCode adds a wrapper in front of MT::App::Trackback::ping that 
intercepts the password handling.  If the ping used the undecrypted url, 
then it modifies the blog name in the ping, which is later recognized by 
TCode's filter to moderate the ping.

If the ping is a duplicate, then the original ping is passed on instead 
of a new one, and the blog name of the original ping is updated to be 
the blog name of the duplicate ping, and thus TCode's special tag gets 
passed along, and recognized by the filter and thus the updated ping is 
marked as moderated, changing it status.

As a consequence of the current duplicate ping handling, I can ping a 
post multiple times from the same url/server combo, changing the title 
and blog name every time, and sending issuing an email, all without 
adding increasing the ping count on a post.  It was very confusing at 
first why I was getting a emails telling me that I had a new trackback 
and then couldn't find said new trackback.  I even deleted a few of 
these "new" trackbacks because they were duplicates before I realized 
that I was deleting the original one.

-- 
*********************************************************
Reed A. Cartwright, PhD     http://scit.us/
Postdoctoral Researcher     http://www.dererumnatura.us/
Department of Genetics      http://www.pandasthumb.org/

Bioinformatics Research Center
North Carolina State University
Campus Box 7566
Raleigh, NC 27695-7566

Cuiusvis hominis est errare, nullius nisi
insipientis in errore perserverare. --Cicero