One I can think of that I'm going to fix right now is the creation of a thread with a blank subject... there'd be no link to click on.
Also I don't perform any checking to see if you're actually trying to reply to a thread that exists.
Minior issues...
I dont think, that this is normal ^^
by CaitSith2 at 1:21 AM EDT on June 1, 2005fine, I'll disable tags in subjects
I also went and finally put in the "no blank thread subject" check. Yes, it also checks for subjects consisting of only spaces, and you can't use a nonbreaking space (even numerically specified) because I've disabled even the numeric entity processing for subjects.
source
the only thing I changed was the user name and password.
However, it sez:
Table 'unknownforums.board' doesn't exist
Ack?
CREATE TABLE `board` (
`idx` int(11) NOT NULL auto_increment,
`postedtime` datetime NOT NULL default '0000-00-00 00:00:00',
`lasttime` datetime NOT NULL default '0000-00-00 00:00:00',
`author` int(11) NOT NULL default '0',
`replyto` int(11) NOT NULL default '0',
`subject` varchar(255) NOT NULL default '',
`message` text NOT NULL,
`ip` varchar(15) NOT NULL default '',
KEY `idx` (`idx`)
)
you'll need a table for users, too:
CREATE TABLE `users` (
`idx` int(11) NOT NULL auto_increment,
`joined` datetime NOT NULL default '0000-00-00 00:00:00',
`uname` varchar(31) NOT NULL default '',
`pass` varchar(31) NOT NULL default '',
KEY `idx` (`idx`)
)
Yes, it was on purpose once I saw that hcs made tags available on subjects. It was just to point it out. In a somewhat funny way too. ;)
http://petersconway.dynu.com/forum.php
Also, let it be noted that my main page has been converted to php.
edited 12:46 AM EDT August 18, 2005
Keep up the good work!
edited 3:00 AM EDT September 5, 2012
You did check for odd protocols in image urls right?
edited 3:40 PM EDT October 3, 2012
henke37: You did check for odd protocols in image urls right?
If you think the HTTPS protocol is odd, then you should consider y'self a noob, sorry. It's the standard for secure HTTP connections. Go search Wikipedia if you don't know what the HTTP protocol is.
Toad King: It shouldn't work in any modern browser at least.
The HTTPS protocol appears on almost any webpage that uses sensitive information, like logins, personal data, etc. so it needs to be supported on all web browsers. And, of course, secured and non-secured webpages can access secured resources, like images, too.
Elven Spellmaker: Doesn't work in IE10.
Maybe, as a security feature, IE10 disallows access to secure HTTPS content using a non-secure webpage, which may be correct in some situations, I guess.
hcs: No. Does that actually work in some browsers?
I personally use Google Chrome for browsing, the image gets correctly displayed for me...
So, don't blame me if your browser/OS/whatever sucks!
edited 2:28 PM EST November 29, 2012
??????????
:)
may I ask you to fix the bug where the authentication fails if you are logged out and are trying to make a post while also logging in (filling out the username and password fields along with a message)?
I don't understand what bug you mean. You can either post while logged in (in which case the user name and password fields are just text instead of form fields) or you can post with your user name and password, which just posts without logging you in.
I know the post-without-logging-in thing works in general, it's usually the way I use the forum.
edited 6:28 PM EDT August 16, 2016
What browser? If you create a new user does it do the same?
edited 9:10 PM EDT August 16, 2016
edited 9:22 PM EDT August 16, 2016
Is your password by any chance longer than 31 characters? I noticed that the login form limits it to 31 chars, as do most of the forms besides the one for submitting a post or thread.
Whether it is or not, maybe you could try changing it, on the chance that it is sticking things up somehow? Again no good reason, I'm calling password_verify pretty much the same way on both paths...
edited 11:06 PM EDT August 16, 2016
But if I lift the limit everywhere, then anyone else in your situation isn't going to be able to log in anymore (unless they manually leave off the chars). More consistent would be to "enforce" the same limit everywhere; as the new user and password change forms already have that limit, that's the password the forum already expects.
edited 11:16 PM EDT August 16, 2016
edited 11:25 PM EDT August 16, 2016
- Log in using any browser
- Log in using a different browser, without logging out from the first browser
- Try to make a post with the first browser
I looked at the source code and it seems the authentication fails because the login token is updated in the database while the token in the cookies remains different between the browsers, so only the most recent login works properly. You should probably have a user_tokens table or something. (I can see the concerns with that approach myself, though.)