It's me Stitch - AKA Sian-lee.

I havent been online for the past week because my phoneline had been cut due to the council working and they accidently broke it. So yesterday I got back on and tried to log into traineo. My computer remmebered the password, but it took me to a new login page saying it had failed. So I tried typing it manuelly and it still wouldnt work.

Has anyone else here in traineo had this problem? I had to create a new account for the time being until I get this back. I even asked to send my password to my email address and I didnt get the email, so it looks like that isnt working either.

I wish someone in the traineo staff could help me out here, it seems like they arent even here at all because theres been a few problems/requests with things that I never see a reply to.

I really miss my other account

Have you tried the password with Caps Lock on? It's worth a try.

Check your junk mail or spam mail folder. The Traineo message might have gotten stuck there too.

ETA: I just tried asking Traineo to send me my password, and sure enough it showed up under Spam on my Gmail account after 5 minutes. It doesn't send you your old password -- it sends you a new one. Once you log in though, you can reset it to your old password (I did).

OK THIS IS MY THIRD ACCOUNT!

it doesnt work!!!

I have checked my email, they're in hotmail and no email from traineo under junk or normal.

You know what the funniest thing is? I created that account that I started this topic in, I signed out of it, and now I cannnot sign back in. It says login failed. Try it! See if you can log out and then back in. I had to create another account just to freakin post a message. Why doesnt traineo work on this!!!

The username / password is probably case sensitive. Try type it exactly as it shows.

Wow! That's crazy Stitch. Yeah, the Traineo staff seems to be sleeping on the job lately. There have been a LOT of problems along these lines with no solutions from them. I don't know what to tell you. Bombard them with emails every hour until they fix it...?

I tried creating this dummy account and it worked. Logged off, and back in -- also worked.

I used a bogus email address and it didn't require validation, so perhaps you typed your email address in wrong? Or used a different one? That may be why you're not getting the automated password reset email.

For some reason, some people just don't get those emails. My friend Wendy made an account on here and after she logged off, it would not let her back in. She sent pass work requests and all that but nothing. She finally just made a new account but by that time figured the whole thing wasn't really worth the effort, and I don't think she's been back.

You're NOT crazy sian! I have the identical problem and have resorted to a new account.

Yeah it is happening to people. I will start a new topic explaining everything.

What is going on???/? Your name is the same as my old one, your state and country is the same, and your PICTURE IS MY PICTURE? :S Is this traineo stuffing up or is someone imitating me.

I thought for a moment I had my account back but I didnt write that commment.

How do I know that isnt actually my account? well all the weights and training is wrong, and I didnt call my account testy1 :S

welcome to schizophrenia.

great

I'm sorry Sianlee...the pain in the ass is me.

I was trying to demonstrate that you could set up a second account and make it look like your first. Hardly anyone would know the difference, because almost nobody pays attention to the account name in the URL. You'd lose your post count and history, plus your records and contacts (but contacts can easily be readded). Otherwise, your identity would be recognizable to most folks.

I didn't mean any harm -- was just trying to troubleshoot with a test account and show you how to recover your identity. I'll delete that now to avoid confusion.

Im sorry Itadaki, I didn't realise it was you, I'm really sorry. You have to understand that I was really peeved off at the time and I didn't like how it was going, so when I saw that I thought maybe someone was trying to hack in or something.

I'm realllly sorry.

I did want all my logs back, and all my comments on my front page and I want to have my old email back on there but you cant have the same email on seperate accounts

I should have explained in my post, and I felt bad about upsetting you at a time like this. When I reread it, I realized it wasn't obvious that it was me posting.

Well, I couldn't get it to break in IE7 with character encoding switches. I did find via Microsoft's FiddlerTool (HTTP Debugging Proxy) that our usernames and passwords are being sent in clear text via a POST request. Hrm. Must change password now.

BUT my biggest discovery is that Traineo doesn't like Hotmail addresses for some reason. I asked for a password reset with a valid Hotmail account and never got it, whereas it only took a minute or so for a GMail account. Malformed email headers perhaps, so Hotmail drops it? Dunno.

Well I went through the java script that had for the lost password popup thing, keep in mind though im only a real novice with java... after much searching I found this, could this be the cause?

function handleForgotPassShow(){
if(http.readyState == 4){
var response = http.responseText;
div='lostpassworddiv';
boxdiv=$(div);
if (response.match(/CALLBACK ERROR:/)){
boxdiv.innerHTML=response;
color='#ff0000';
new Effect.Appear(div);
new Effect.Highlight(div, {startcolor:color});
setTimeout("new Effect.Fade(div);",1500);
}
else {
boxdiv.innerHTML=response;
new Effect.Appear(div,{to:0.95});
}
}
}

I dont know if it will show in here, but it says callbackerror in one.

Can you please explain:

"Well, I couldn't get it to break in IE7 with character encoding switches. I did find via Microsoft's FiddlerTool (HTTP Debugging Proxy) that our usernames and passwords are being sent in clear text via a POST request. Hrm. Must change password now." does that mean I can somehow retrieve the password through traineo or something?


I also tried sending to my unviersity email.....didnt get it.

I haven't look at the lost password page to see how it works, but it looks like the Javascript code is making a request to the server and displaying the response in a box. If there is a "callback error" then a box is shown with the error message, it is highlighted and then it fades away.

So in other words, the callback error isn't a problem unless your actually seeing an error message in your browser when using it.

Hmm oh well,

What is says that when I type in my email it says "check your email". But that's it, I check it, its not there. I have a windows live account, hotmail account, and my university account - havent got it in either accounts.

No, I just meant that someone could steal your password easily with a packet sniffer. Sending passwords in clear text is a no-no.

However, passwords are usually stored in some SQL-like database so resetting a password is not a big deal. You want to have a script automate it, but it can also be done manually if need be.

I checked the email headers on the password reset email sent to my GMail account and saw this:



Siteprotect.com passes Google's SPF check, but the mail is dumped straight into the Spam bin. I wonder if Hotmail MTAs just drop the message altogether? They're not supposed to if the SPF passes, so it could be buggy Microsoft code.

There seems to be some mention of Siteprotect.com being a spam source, but it doesn't show up under any blacklists in an MX Lookup scan.

Bottom Line:Hotmail is dropping Traineo password reset emails. I'm not sure why, but it does. I suggest using something other than Hotmail for the time being.

That's interesting, I wish hotmail would just let it go into my spam box.

I wonder if its possible to access the database you talk about, I know its wrong I guess but I wanna find my password because traineo wont be doing anything about it. LIke if there was someway you could search for the name and then it would automaticly bring up the password or something.

Traineo should do something like it displays password online, like email accounts do after veryfying the secret password.

I don't see the Blubolt staff on any more. Chris Mattingly hasn't been on since September 07. Maxwell Lamb and Amy Mahon have even deleted their profiles.

In any case, they use mySQL but I doubt you're going to get into it. For one, that'd be hacking. Second, I doubt they'd leave themselves open to SQL injection attacks -- esp. when using a fairly spiffy AJAX framework as they do. I'd bet input validation comes by default with all form fields.

geeze I mean what the hell, people are experiencing problems with their accounts and no one is even active anymore to f***en fix it!