getImageEXIF with new API

devbobo

I have been playing with the getImageEXIF method on the new API, and I keep getting 'Invalid User' when I pass the current SessionID.

However, I found something interesting, it seems if you pass null as the sessionID, the function returns correctly.

Weird

David

Nikolai

Naaaaice!

devbobo wrote:

I have been playing with the getImageEXIF method on the new API, and I keep getting 'Invalid User' when I pass the current SessionID.
However, I found something interesting, it seems if you pass null as the sessionID, the function returns correctly.
Weird
David

Good job, thanks for sharing!

By null you mean empty string? I mean, your request would have something like
[PHP]<param></param>[/PHP]




</PARAM></P>instead of


[PHP]<param>1231g23812h31928312h</param>?[/PHP] </P>Or you skipping the whole parameter "line"?

Cheers!

devbobo

I may have been a bit hastey when I said returning 'correctly', the responseXML return is empty as below...
<?xml version="1.0" encoding="iso-8859-1"?>
<methodResponse>
<params>
<param>
<value>
<string/>
</value>
</param>
</params>
</methodResponse>

At least it doesn't return a "invalid user", note this seems to only work for a certain period of time of I log out.

nikolai...by null I mean...
<param><value><string></string></value></param>

Also, found that 'getImages' returns completely the correct data when null is passed as the SessionID.

Cheers,

David

Nikolai

David,

devbobo wrote:

I may have been a bit hastey when I said returning 'correctly', the responseXML return is empty as below...
[PHP] <?xml version="1.0" encoding="iso-8859-1"?>
<methodResponse>
<params>
<param>
<value>
<string/>
</value>
</param>
</params>
</methodResponse>
[/PHP]
At least it doesn't return a "invalid user", note this seems to only work for a certain period of time of I log out.

nikolai...by null I mean...
[PHP] <param><value><string></string></value></param>[/PHP]
Also, found that 'getImages' returns completely the correct data when null is passed as the SessionID.

Cheers,

David

Thanks!
frigging VB, cannot show xml tags properly..

It looks like null session ID can be a serious security breach. User ID is realy easy to get a hold of.. Don, if you're reading this, I would personally ask for a favor to close these "door" immediately..

Thanks for sharing, David!

Nikolai

How did you manage
to get xmls tag show as a normal text?

devbobo wrote:

I may have been a bit hastey when I said returning 'correctly', the responseXML return is empty as below...
<?xml version="1.0" encoding="iso-8859-1"?>
<methodResponse>
<params>
<param>
<value>
<string/>
</value>
</param>
</params>
</methodResponse>

onethumb

Nikolai wrote:

Thanks!
frigging VB, cannot show xml tags properly..

It looks like null session ID can be a serious security breach. User ID is realy easy to get a hold of.. Don, if you're reading this, I would personally ask for a favor to close these "door" immediately..

Thanks for sharing, David!

There's no "door". It's just treated as if it's an anonymous login.

Don

onethumb

devbobo wrote:

I have been playing with the getImageEXIF method on the new API, and I keep getting 'Invalid User' when I pass the current SessionID.

However, I found something interesting, it seems if you pass null as the sessionID, the function returns correctly.

Weird

David

Fixed, I think.

Don

devbobo

Thanks

onethumb wrote:

Fixed, I think.

Don

Thanks Don

Nikolai

Now I can sleep:-)

onethumb wrote:

There's no "door". It's just treated as if it's an anonymous login.
Don

Thanks for the response!

I guess if this were mentioned in the help section we would not have this issue raised at all:-) Just a thought:-)

Have a good night!

Cheers! (taking another sip of 30 yo port:-)

Nik