[Clipart] getting metadata for a release

Jochen Staerk jstaerk at usegroup.de
Mon Mar 2 02:14:37 PST 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hi,

> The next problem is that when i want the data from an tag with a lot of
> objects like "animal" the Api doesn't work anymore.

It looks as if the API cracks down to HTML on the 384th item of the tag
"animal"
http://openclipart.org/media/api/query?f=rss&tags=animal&limit=383
works,
http://openclipart.org/media/api/query?f=rss&tags=animal&limit=384
does not.

Funny: http://openclipart.org/media/api/query?f=rss&tags=animal&limit=-1
returns a SQL dump which somebody could use to try an SQL injection.

The _interesting_ thing is that this /could/ potentially be caused by
invalid items (invalid characters in their name or description?), as the
same query with 'human' instead of 'animal' works:
http://openclipart.org/media/api/query?f=rss&tags=human&limit=384

kind regards,

- --

mit freundlichen Grüßen
Jochen Stärk

www.usegroup.de            (home office)
Albigerstr. 22             Am Wald 3
55232 Alzey                55270 Ober-Olm

Tel: (06731)997997-5       (06131)584278-0
Fax: (06731)997997-6       (06131)584278-1
Mobil: (0177)4512645

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkmrsYoACgkQIQmdcXOPL7z3NwCg5BevHLvWAtU8gvRSJkUWF/zW
xp8AoITfvwvtYiunTbfF4OcfccwD4v8J
=JKmd
-----END PGP SIGNATURE-----



More information about the clipart mailing list