|
||||||
|
Views:
5,567,388 |
   
Main
| FAQ
| IRC chat
| Memberlist
| Active users
| Latest posts
| Calendar
| Stats
| Ranks
| Online users
| Search
|
10-18-18 05:32 AM |
||||
| Guest: Register | Login | ||||||
| 0 users currently in AcmlmBoard Developer Zone | 1 guest |
| Main - AcmlmBoard Developer Zone - [WIP] Experimental Acmlmboard 0.7 fork (1) |
| Nin★Collin |
| ||
 Shyguy Level: 16    
Posts: 46/92 EXP: 17806 Next: 2450 Since: 09-06-17 From: World X Pipe Last post: 9 days Last view: 8 hours |
The past few weeks I've been working on a highly experimental fork of Acmlmboard 0.7.
My main goal is to clean up and optimize the code as well as documenting everything to ultimately create a lightweight base for others to fork and customize. As of right now though the code is a mess, and the converted pages are still quite buggy. Version specific info in in the README file for each release. ---------------------------------------- Disclaimer ---------------------------------------- This is test software blah blah blah, don't expect it to work. ---------------------------------------- Releases ---------------------------------------- Prerelease 09-23-2018 Nightly 07-27-2018 Nightly 07-26-2018 Nightly 07-25-2018 Nightly 07-24-2018 Nightly 07-23-2018 ---------------------------------------- Roadmap ---------------------------------------- *Revise code for neatness, security, and functionality. *Implement permissions (and related things) *Figure out a simple search feature *Add birthday input field *Add events and revise backported calendar *Create a few functions for various things *Improve scheme support *Add pages in certain places *Add Private Messages support *Add minipics *Add shoutcast support *Add pronouns, revise namecolor system *Remove various testing garbage *Add buttons to jump to the last post in a thread *optimize queries *Make most input boxes "HTML Proof." We don't want threads that are titled with autoplaying HTML5 video ---------------------------------------- Additional Notes ---------------------------------------- All pages now functional! Specific features: *Powerlevels have been removed, but the permission-based system hasn't been implemented yet. Instead, the field "debug" in table "users" temporarily controls staff functions. *Restrictions on forums (i.e. staff forums, read-only forums) haven't been implemented yet. Involves permissions. *Banned users haven't been implemented yet. Involves permissions. Known Bugs: *Number of threads in profile is calculated wrong *Timezone offset not working *I encountered a weird bug when editing posts in which every line break was replaced with 2 line breaks. Hasn't occured again. *Probably many more little things |
| Jamie |
| ||
    Banned by request Level: 64
Posts: 1136/1428 EXP: 2156779 Next: 57318 Since: 06-03-14 From: Margate, GB Last post: 8 hours Last view: 8 hours |
I'd be interested in testing this, or at least giving you some kind of testing ground. My server runs MariaDB 10 (based on MySQL 5.8 iirc) and PHP 7.0 on Apache 2.4.25 if you want to use it for anything. I've just got to figure how to make permissions works on PHP with homedirs while allowing write access by the user  |
| NightYoshi370 |
| ||
 Level: 26
Posts: 311/314 EXP: 94799 Next: 7476 Since: 12-31-17 Last post: 79 days Last view: 63 days |
You might want to downgrade to PHP 4... ____________________ Mario Making Mods |
| Nin★Collin |
| ||
|
Shyguy Level: 16
Posts: 47/92 EXP: 17806 Next: 2450 Since: 09-06-17 From: World X Pipe Last post: 9 days Last view: 8 hours |
Posted by Jamie If you want to, go right ahead! I haven't been able to test this at all on PHP 7 (I've been using 5.6) but theoretically it should work. Let me know if it does (or does not) and feel free to report any bugs here 
---------------------------------------------------------------- Nightly 07-25-2018 has been released. -------------------------------- Version Changes -------------------------------- *Misc things fixed to point to new working pages *Until permissions are finished, a field titled "debug" controls staff functions +Edit Thread is now working. +Edit User is now working. |
| Jamie |
| ||
|
Banned by request Level: 64
Posts: 1149/1428 EXP: 2156779 Next: 57318 Since: 06-03-14 From: Margate, GB Last post: 8 hours Last view: 8 hours |
mysql_error() is being used in profile.php
also, remove the password from the debug stats, that's kinda creepy. MD5 is also not secure at all, look into using password_hash function from Php 5.5 onwards |
| Epele |
| ||
|
Administrator
The Sorceress. My servants never die! Level: 209
Posts: 18625/19233 EXP: 132865297 Next: 1339343 Since: 01-01-12 From: UK Last post: 1 day Last view: 6 hours |
MD5 isn't totally insecure. Just ensure you salt it with some garbage and it can't be brute-forced as the attacker would need the salt to brute force it.
|
| Jamie |
| ||
|
Banned by request Level: 64
Posts: 1153/1428 EXP: 2156779 Next: 57318 Since: 06-03-14 From: Margate, GB Last post: 8 hours Last view: 8 hours |
given it gave me my plaintext password on a certain debug page, I doubt it's salted for some reason |
| Epele |
| ||
|
Administrator
The Sorceress. My servants never die! Level: 209
Posts: 18626/19233 EXP: 132865297 Next: 1339343 Since: 01-01-12 From: UK Last post: 1 day Last view: 6 hours |
Posted by JamieThere is no security as of yet provided on the password field as per the initial post: Posted by Nin★Collin This would suggest some systems are still due to be updated.
|
| Thieppy |
| ||
|
gee, waffles! Level: 93
Posts: 2887/3104 EXP: 7807529 Next: 245281 Since: 03-19-13 From: Last post: 13 hours Last view: 6 min. |
you should put a warning on the register page in the meantime. people are known to reuse passwords easily, it's actually pretty irresponsible not to consider that. ____________________ do you like clicking links? |
| Jamie |
| ||
|
Banned by request Level: 64
Posts: 1155/1428 EXP: 2156779 Next: 57318 Since: 06-03-14 From: Margate, GB Last post: 8 hours Last view: 8 hours |
yeah. I use the same pass pretty much everywhere or the same style |
| Yushe |
| ||
 internet = mistake Level: 30
Posts: 237/244 EXP: 157411 Next: 8458 Since: 02-15-14 Last post: 26 days Last view: 3 days |
Posted by ThieppyThis. Kinda dumb just to put the warning message on the login page. ____________________ Yushe#1289Twitter - YouTube - E-mail |
| Nin★Collin |
| ||
|
Shyguy Level: 16
Posts: 49/92 EXP: 17806 Next: 2450 Since: 09-06-17 From: World X Pipe Last post: 9 days Last view: 8 hours |
Posted by YushePosted by ThieppyThis. Kinda dumb just to put the warning message on the login page. Inputing a password in register.php doesn't directly pose any security risks, as it doesn't automatically log you in and it stores your password in the database using MD5. But yeah, I get what you're saying, and the new authentication system will either be salted or use the native password_ functions. I've added the warning marquees everywhere, as well as added a disclaimer at the top of every page. Edit: (I can't double post) I wiped the user accounts on my test board, because the new login system is incompatible with it
---------------------------------------------------------------- Nightly 07-26-2018 has been released. -------------------------------- Version Changes -------------------------------- *Software now released under the Affero GPL license. +A new encrypted login system has been implemented. I'm still deciding on how well I like it, so it's subject to change. +Began documenting and formating a few pages +Fixed a profile.php bug thanks to Jamie |
| Nin★Collin |
| ||
|
Shyguy Level: 16
Posts: 84/92 EXP: 17806 Next: 2450 Since: 09-06-17 From: World X Pipe Last post: 9 days Last view: 8 hours |
Been a while since I put a release here
Prerelease 09-23-2018 has been released. -------------------------------- Version Changes -------------------------------- So many things, but all pages are at least mostly functional now. |
| Elemi |
| ||
|
C₁₂H₁₆N₂ Level: 33
Posts: 241/266 EXP: 215964 Next: 13215 Since: 01-05-12 Last post: 5 days Last view: 6 hours |
Evil's Post Keeping the legacy alive!
Very happy to see finally a version that brings all the basics and should offer people a simple clean base to work from! I'm tired of trying to shave Acmlmboards and breaking everything the getting bamboozled. I'm gonna keep an eye on this, your work is appreciated! Live ~ See ~ Do |
| Main - AcmlmBoard Developer Zone - [WIP] Experimental Acmlmboard 0.7 fork (1) |
 Acmlmboard v2.5.4 (10/13/2018) © 2005-2018 Acmlm, Emuz, et al. |
|
MySQL - queries: 160, rows: 511/545, time: 0.050 seconds. |
