Today, in class my trainer asked all of the participants in the class to test the live project http://www.taxguruhelp.com/ to find problems in the website. We found many bugs. When my trainer told “You will be testing the live project afternoon”. I was waiting for afternoon. It was a challenging work for me. I started with spell check and found spelling mistakes on different pages of the website. I tried SQL Injection attacks. I found inconsistency in the registration confirmation or activation e-mail sent to my e-mail inbox. I saw that there were two links.
1. Activate my account now
<a href=”http://wwww.taxguruhelp.com/login.php?xfrgs=somenumbershere)
2. http://www.taxguruhelp.com/login1.php?xfrgs=somenumbershere
These above 2 links took me to different pages which were not similar.
You can try clicking on the links even if the bug is not fixed.
I found many links that were hidden. I think the developer developed the first version with filename then they developed other version and appended the filename with 1.
Example: taxguruhelp.com/login1.php
taxguruhelp.com/complete_registration1.php
I think this website is in testing phase so this post was just about my testing activity.
Recent Comments