Attention!!™
SMB3 Hacking Forum Opened!
Information needed!
If you have any useful data on hacking SMB3, please post it in the this stickied thread in the new SMB3 Forum. We are also looking for someone to help run a SMB3 hacking Wiki.
Join the Kafuka Discord! (Click here)
Views: 5,567,388
Main | FAQ | IRC chat | Memberlist | Active users | Latest posts | Calendar | Stats | Ranks | Online users | Search
10-18-18 05:32 AM
Guest: Register | Login

0 users currently in AcmlmBoard Developer Zone | 1 guest

Main - AcmlmBoard Developer Zone - [WIP] Experimental Acmlmboard 0.7 fork (1)
Next newer thread | Next older thread


Nin★Collin
Posted on 07-25-18 01:23 AM (rev. 13 of 09-23-18 03:09 PM by Nin★Collin) Link | ID: 138407

Shyguy

Level: 16


Posts: 46/92
EXP: 17806
Next: 2450

Since: 09-06-17
From: World X Pipe

Last post: 9 days
Last view: 8 hours
The past few weeks I've been working on a highly experimental fork of Acmlmboard 0.7.

My main goal is to clean up and optimize the code as well as documenting everything to ultimately create a lightweight base for others to fork and customize.

As of right now though the code is a mess, and the converted pages are still quite buggy.

Version specific info in in the README file for each release.

----------------------------------------
Disclaimer
----------------------------------------
This is test software blah blah blah, don't expect it to work.

----------------------------------------
Releases
----------------------------------------
Prerelease 09-23-2018
Nightly 07-27-2018
Nightly 07-26-2018
Nightly 07-25-2018
Nightly 07-24-2018
Nightly 07-23-2018

----------------------------------------
Roadmap
----------------------------------------
*Revise code for neatness, security, and functionality.
*Implement permissions (and related things)
*Figure out a simple search feature
*Add birthday input field
*Add events and revise backported calendar
*Create a few functions for various things
*Improve scheme support
*Add pages in certain places
*Add Private Messages support
*Add minipics
*Add shoutcast support
*Add pronouns, revise namecolor system
*Remove various testing garbage
*Add buttons to jump to the last post in a thread
*optimize queries
*Make most input boxes "HTML Proof." We don't want threads that are titled with autoplaying HTML5 video
----------------------------------------
Additional Notes
----------------------------------------
All pages now functional!

Specific features:
*Powerlevels have been removed, but the permission-based system hasn't been implemented yet. Instead, the field "debug" in table "users" temporarily controls staff functions.
*Restrictions on forums (i.e. staff forums, read-only forums) haven't been implemented yet. Involves permissions.
*Banned users haven't been implemented yet. Involves permissions.

Known Bugs:
*Number of threads in profile is calculated wrong
*Timezone offset not working
*I encountered a weird bug when editing posts in which every line break was replaced with 2 line breaks. Hasn't occured again.
*Probably many more little things

Jamie
Posted on 07-25-18 10:49 AM Link | ID: 138430

Banned by request
Level: 64


Posts: 1136/1428
EXP: 2156779
Next: 57318

Since: 06-03-14
From: Margate, GB

Last post: 8 hours
Last view: 8 hours
I'd be interested in testing this, or at least giving you some kind of testing ground. My server runs MariaDB 10 (based on MySQL 5.8 iirc) and PHP 7.0 on Apache 2.4.25 if you want to use it for anything. I've just got to figure how to make permissions works on PHP with homedirs while allowing write access by the user :P

NightYoshi370
Posted on 07-25-18 05:37 PM Link | ID: 138463


Level: 26


Posts: 311/314
EXP: 94799
Next: 7476

Since: 12-31-17

Last post: 79 days
Last view: 63 days
You might want to downgrade to PHP 4...

____________________
Mario Making Mods

Nin★Collin
Posted on 07-25-18 10:29 PM (rev. 3 of 07-25-18 10:37 PM by Nin★Collin) Link | ID: 138509

Shyguy

Level: 16


Posts: 47/92
EXP: 17806
Next: 2450

Since: 09-06-17
From: World X Pipe

Last post: 9 days
Last view: 8 hours
Posted by Jamie
I'd be interested in testing this, or at least giving you some kind of testing ground. My server runs MariaDB 10 (based on MySQL 5.8 iirc) and PHP 7.0 on Apache 2.4.25 if you want to use it for anything. I've just got to figure how to make permissions works on PHP with homedirs while allowing write access by the user :P

If you want to, go right ahead! I haven't been able to test this at all on PHP 7 (I've been using 5.6) but theoretically it should work. Let me know if it does (or does not) and feel free to report any bugs here ;)

----------------------------------------------------------------
Nightly 07-25-2018 has been released.

--------------------------------
Version Changes
--------------------------------
*Misc things fixed to point to new working pages
*Until permissions are finished, a field titled "debug" controls staff functions
+Edit Thread is now working.
+Edit User is now working.

Jamie
Posted on 07-26-18 06:54 AM Link | ID: 138567

Banned by request
Level: 64


Posts: 1149/1428
EXP: 2156779
Next: 57318

Since: 06-03-14
From: Margate, GB

Last post: 8 hours
Last view: 8 hours
mysql_error() is being used in profile.php

also, remove the password from the debug stats, that's kinda creepy. MD5 is also not secure at all, look into using password_hash function from Php 5.5 onwards

Epele
Posted on 07-26-18 10:25 AM Link | ID: 138573
Administrator
The Sorceress.
My servants never die!

Level: 209


Posts: 18625/19233
EXP: 132865297
Next: 1339343

Since: 01-01-12
From: UK

Last post: 1 day
Last view: 6 hours
MD5 isn't totally insecure. Just ensure you salt it with some garbage and it can't be brute-forced as the attacker would need the salt to brute force it.


<Nicolyn> Thierry doesn't sleep
<Nicolyn> she is powered solely by those little floating hearts

Jamie
Posted on 07-26-18 10:44 AM Link | ID: 138575

Banned by request
Level: 64


Posts: 1153/1428
EXP: 2156779
Next: 57318

Since: 06-03-14
From: Margate, GB

Last post: 8 hours
Last view: 8 hours
given it gave me my plaintext password on a certain debug page, I doubt it's salted for some reason

Epele
Posted on 07-26-18 11:06 AM Link | ID: 138578
Administrator
The Sorceress.
My servants never die!

Level: 209


Posts: 18626/19233
EXP: 132865297
Next: 1339343

Since: 01-01-12
From: UK

Last post: 1 day
Last view: 6 hours
Posted by Jamie
given it gave me my plaintext password on a certain debug page, I doubt it's salted for some reason
There is no security as of yet provided on the password field as per the initial post:
Posted by Nin★Collin
*Password cookies are currently unencrypted for testing purposes. The cookie/login system will be rewritten at some point, or at least encrypted.


This would suggest some systems are still due to be updated.


<Nicolyn> Thierry doesn't sleep
<Nicolyn> she is powered solely by those little floating hearts

Thieppy
Posted on 07-26-18 11:13 AM Link | ID: 138579


gee, waffles!
Level: 93


Posts: 2887/3104
EXP: 7807529
Next: 245281

Since: 03-19-13
From:

Last post: 13 hours
Last view: 6 min.
you should put a warning on the register page in the meantime. people are known to reuse passwords easily, it's actually pretty irresponsible not to consider that.

____________________
do you like clicking links?

Jamie
Posted on 07-26-18 11:43 AM Link | ID: 138580

Banned by request
Level: 64


Posts: 1155/1428
EXP: 2156779
Next: 57318

Since: 06-03-14
From: Margate, GB

Last post: 8 hours
Last view: 8 hours
yeah. I use the same pass pretty much everywhere or the same style

Yushe
Posted on 07-26-18 04:08 PM Link | ID: 138628

internet = mistake

Level: 30


Posts: 237/244
EXP: 157411
Next: 8458

Since: 02-15-14

Last post: 26 days
Last view: 3 days

Posted by Thieppy
you should put a warning on the register page in the meantime. people are known to reuse passwords easily, it's actually pretty irresponsible not to consider that.
This. Kinda dumb just to put the warning message on the login page.

____________________

Yushe#1289

Twitter - YouTube - E-mail




Nin★Collin
Posted on 07-26-18 08:22 PM (rev. 3 of 07-27-18 05:49 AM by Nin★Collin) Link | ID: 138709

Shyguy

Level: 16


Posts: 49/92
EXP: 17806
Next: 2450

Since: 09-06-17
From: World X Pipe

Last post: 9 days
Last view: 8 hours
Posted by Yushe
Posted by Thieppy
you should put a warning on the register page in the meantime. people are known to reuse passwords easily, it's actually pretty irresponsible not to consider that.
This. Kinda dumb just to put the warning message on the login page.

Inputing a password in register.php doesn't directly pose any security risks, as it doesn't automatically log you in and it stores your password in the database using MD5. But yeah, I get what you're saying, and the new authentication system will either be salted or use the native password_ functions.

I've added the warning marquees everywhere, as well as added a disclaimer at the top of every page.




Edit: (I can't double post)

I wiped the user accounts on my test board, because the new login system is incompatible with it :P

----------------------------------------------------------------
Nightly 07-26-2018 has been released.

--------------------------------
Version Changes
--------------------------------
*Software now released under the Affero GPL license.
+A new encrypted login system has been implemented. I'm still deciding on how well I like it, so it's subject to change.
+Began documenting and formating a few pages
+Fixed a profile.php bug thanks to Jamie

Nin★Collin
Posted on 09-23-18 03:03 PM Link | ID: 140741

Shyguy

Level: 16


Posts: 84/92
EXP: 17806
Next: 2450

Since: 09-06-17
From: World X Pipe

Last post: 9 days
Last view: 8 hours
Been a while since I put a release here
Prerelease 09-23-2018 has been released.
--------------------------------
Version Changes
--------------------------------
So many things, but all pages are at least mostly functional now.

Elemi
Posted on 09-23-18 11:21 PM Link | ID: 140796

C₁₂H₁₆N₂
Level: 33


Posts: 241/266
EXP: 215964
Next: 13215

Since: 01-05-12

Last post: 5 days
Last view: 6 hours
Evil's Post
Keeping the legacy alive!

Very happy to see finally a version that brings all the basics and should offer people a simple clean base to work from!

I'm tired of trying to shave Acmlmboards and breaking everything the getting bamboozled.

I'm gonna keep an eye on this, your work is appreciated!

Elemi's Nexus
Me do the science!
Live ~ See ~ Do   ;)

Next newer thread | Next older thread
Main - AcmlmBoard Developer Zone - [WIP] Experimental Acmlmboard 0.7 fork (1)


Acmlmboard v2.5.4 (10/13/2018)
© 2005-2018 Acmlm, Emuz, et al.

Page rendered in 0.107 seconds. (643KB of memory used)
MySQL - queries: 160, rows: 511/545, time: 0.050 seconds.