Hi everyone

Just a quick report, should not be too hard to fix (if a non-dev reads this: Ask a dev to add these issues to the bug-tracker. He'll know what that means.)

First: Bug in the Forum (Account creation)

1. Create a new account, say NICK_A with email [email protected].

2. Create a second account, say NICK_OTHER with THE SAME EMAIL adress.

-> You now will receive the message "The account was created sucessfully", and you will also receive your second activation eMail. However, once you complete the activation process, you won't be able to log into your account. And once you check the nick NICK_OTHER for availability, it will still be available. The account was never created, despite the sucess message!

What you should do: Check if an email adress is already present in the system, then return an error. Or allow different accounts on same email adress (this is probably hard for you to realize, since Impulse uses email/username pairs as I've seen it).

Second: Account change in Impulse

You need 2 working accounts. For me, one account had one purchased game, the other was a "fresh" account, without any games registered. I logged into my first Account and selected "My Games". I was correctly shown the one game I had registered with that account. Then I changed into my second account, and expected to see no games in the "my Games" list. But the list wasn't cleared upon account change, and I could still install the game from my first account. (That's right, I could install a game without owning it!)

What you should do: Clear all account-based data upon account change

Last: Having the same game multiple times on one account

I Bought Sins: Trinity a few days back, and now wanted to play with some friends, so I bought a license online. In total I have 2 licenses now. When I click on "My Games" I would expect to see 2 entries, both labeled "Sins: trinity". But instead I only see 1 entry, and if I check the serial of that entry I am only shown one of my 2 serial numbers.

And here is the weird part: I click on "Register a game", and enter the not-shown serial (Example: It shows TEST-***-***-***, and I now enter OTHER-***-***-***) -> I receive a "Your game has been registered successfully" message, and when I click on "Show serial" now, the second serial (for the Example above: OTHER-***-***-***). I can then "Register a game" with the first serial (eg: TEST-***-***-***), which is also successful. And so on and so forth, an endless game.

What you should do: Allow the same game multiple times per account, distinguished by the serial #. If that is not possible, alert the user before the purchase, and let him select a different account of his choice. A mail about this is already send at sales@stardock. I hope they can transfer one of my two licenses to another account

Should you need more info: I monitor this thread as well as my PMs, or you can directly write me a Mail.

Thanks and good luck squishing the bugs.

FlorianBesser

PS: Interested about XSS / SQL-Injection attacks? I could run some with your consent, if you are interested (Yes, I study IT, no you are not expected to know what those terms mean, it is just very bad if a website is compromised by such a flaw. as bad as in "lose your credit card number". You get te idea