May 03, 2003

Way To Go Microsoft

On the The SecurityFocus BugTraq mailing list, Ramon Cascales has posted perhaps the dumbest IE bug ever, a single line of plain HTML which crashes IE (and Frontpage and Outlook Express and anything else that uses shlwapi.dll).

Any page including <input type crash> will promptly crash IE.

To add my own wrinkle to this and show off my mighty rudimentary PHP powers, I have written (or ripped off a tutorial site) a PHP script which, if you are using IE, outputs the fatal string, but if you are not, merely congratulates you on your taste:

<?php if (strstr($_SERVER["HTTP_USER_AGENT"],
"MSIE")) { ?> <input type crash> <?php } else { ?> <center><b>Lucky for you you're not using IE!</b></center> <?php } ?>

This is probably entirely superfluous. I believe a page that consisted of the fatal line and the congratulation would probably work, since any IE user would never see the congratulation, having crashed on the first line. Only Microsoft could bring us something quite this stupid. Posted by muldrake at May 3, 2003 07:27 AM | TrackBack

Comments

Funny story. Unbelievable actually. The penquins say 'Hi!' btw.


Mike

Posted by: mike at June 14, 2003 04:03 PM
Post a comment









Remember personal info?