|
||||||
|
Views:
5,885,572 |
   
Main
| FAQ
| IRC chat
| Memberlist
| Active users
| Latest posts
| Calendar
| Stats
| Ranks
| Online users
| Search
|
01-24-19 06:40 AM |
||||
| Guest: Register | Login | ||||||
| 0 users currently in AcmlmBoard Developer Zone | 1 guest |
| Main - AcmlmBoard Developer Zone - [WIP] Experimental Acmlmboard 0.7 fork (1) |
| NinLenna |
| ||
 Shyguy Level: 17    
Posts: 46/98 EXP: 21806 Next: 2937 Since: 09-06-17 From: World X Pipe Last post: 49 days Last view: 24 days |
The past few weeks I've been working on a highly experimental fork of Acmlmboard 0.7.
My main goal is to clean up and optimize the code as well as documenting everything to ultimately create a lightweight base for others to fork and customize. As of right now though the code is a mess, and the converted pages are still quite buggy. Version specific info in in the README file for each release. ---------------------------------------- Disclaimer ---------------------------------------- This is test software blah blah blah, don't expect it to work. ---------------------------------------- Releases ---------------------------------------- Prerelease 09-23-2018 Nightly 07-27-2018 Nightly 07-26-2018 Nightly 07-25-2018 Nightly 07-24-2018 Nightly 07-23-2018 ---------------------------------------- Roadmap ---------------------------------------- *Revise code for neatness, security, and functionality. *Implement permissions (and related things) *Figure out a simple search feature *Add birthday input field *Add events and revise backported calendar *Create a few functions for various things *Improve scheme support *Add pages in certain places *Add Private Messages support *Add minipics *Add shoutcast support *Add pronouns, revise namecolor system *Remove various testing garbage *Add buttons to jump to the last post in a thread *optimize queries *Make most input boxes "HTML Proof." We don't want threads that are titled with autoplaying HTML5 video ---------------------------------------- Additional Notes ---------------------------------------- All pages now functional! Specific features: *Powerlevels have been removed, but the permission-based system hasn't been implemented yet. Instead, the field "debug" in table "users" temporarily controls staff functions. *Restrictions on forums (i.e. staff forums, read-only forums) haven't been implemented yet. Involves permissions. *Banned users haven't been implemented yet. Involves permissions. Known Bugs: *Number of threads in profile is calculated wrong *Timezone offset not working *I encountered a weird bug when editing posts in which every line break was replaced with 2 line breaks. Hasn't occured again. *Probably many more little things ____________________ |
| Jamie |
| ||
Banned
   outta here. Level: 65
Posts: 1136/1457 EXP: 2290011 Next: 45617 Since: 06-03-14 Last post: 74 days Last view: 74 days |
I'd be interested in testing this, or at least giving you some kind of testing ground. My server runs MariaDB 10 (based on MySQL 5.8 iirc) and PHP 7.0 on Apache 2.4.25 if you want to use it for anything. I've just got to figure how to make permissions works on PHP with homedirs while allowing write access by the user  |
| NightYoshi370 |
| ||
 Level: 27
Posts: 311/315 EXP: 110170 Next: 5989 Since: 12-31-17 Last post: 5 days Last view: 3 days |
You might want to downgrade to PHP 4... ____________________ Mario Making Mods |
| NinLenna |
| ||
|
Shyguy Level: 17
Posts: 47/98 EXP: 21806 Next: 2937 Since: 09-06-17 From: World X Pipe Last post: 49 days Last view: 24 days |
Posted by Jamie If you want to, go right ahead! I haven't been able to test this at all on PHP 7 (I've been using 5.6) but theoretically it should work. Let me know if it does (or does not) and feel free to report any bugs here 
---------------------------------------------------------------- Nightly 07-25-2018 has been released. -------------------------------- Version Changes -------------------------------- *Misc things fixed to point to new working pages *Until permissions are finished, a field titled "debug" controls staff functions +Edit Thread is now working. +Edit User is now working. ____________________ |
| Jamie |
| ||
|
Banned
outta here. Level: 65
Posts: 1149/1457 EXP: 2290011 Next: 45617 Since: 06-03-14 Last post: 74 days Last view: 74 days |
mysql_error() is being used in profile.php
also, remove the password from the debug stats, that's kinda creepy. MD5 is also not secure at all, look into using password_hash function from Php 5.5 onwards |
| Epele |
| ||
|
Acmlmistrator
The Sorceress. OwO Level: 212
Posts: 18625/19707 EXP: 140503453 Next: 532102 Since: 01-01-12 From: UK Last post: 4 hours Last view: 4 hours |
MD5 isn't totally insecure. Just ensure you salt it with some garbage and it can't be brute-forced as the attacker would need the salt to brute force it. The world could always use more heroes! |
| Jamie |
| ||
|
Banned
outta here. Level: 65
Posts: 1153/1457 EXP: 2290011 Next: 45617 Since: 06-03-14 Last post: 74 days Last view: 74 days |
given it gave me my plaintext password on a certain debug page, I doubt it's salted for some reason |
| Epele |
| ||
|
Acmlmistrator
The Sorceress. OwO Level: 212
Posts: 18626/19707 EXP: 140503453 Next: 532102 Since: 01-01-12 From: UK Last post: 4 hours Last view: 4 hours |
Posted by JamieThere is no security as of yet provided on the password field as per the initial post: Posted by Nin★Collin This would suggest some systems are still due to be updated. The world could always use more heroes! |
| Thieppy |
| ||
|
gee, waffles! Level: 95
Posts: 2887/3256 EXP: 8587359 Next: 81248 Since: 03-19-13 Last post: 14 hours Last view: 5 hours |
you should put a warning on the register page in the meantime. people are known to reuse passwords easily, it's actually pretty irresponsible not to consider that. ____________________ for all intents and purposes, you are all lewd. |
| Jamie |
| ||
|
Banned
outta here. Level: 65
Posts: 1155/1457 EXP: 2290011 Next: 45617 Since: 06-03-14 Last post: 74 days Last view: 74 days |
yeah. I use the same pass pretty much everywhere or the same style |
| Yushe |
| ||
  internet = mistake Level: 30
Posts: 237/244 EXP: 161872 Next: 3997 Since: 02-15-14 Last post: 124 days Last view: 22 days |
Posted by ThieppyThis. Kinda dumb just to put the warning message on the login page. ____________________ Yushe#1289Twitter - YouTube - E-mail |
| NinLenna |
| ||
|
Shyguy Level: 17
Posts: 49/98 EXP: 21806 Next: 2937 Since: 09-06-17 From: World X Pipe Last post: 49 days Last view: 24 days |
Posted by YushePosted by ThieppyThis. Kinda dumb just to put the warning message on the login page. Inputing a password in register.php doesn't directly pose any security risks, as it doesn't automatically log you in and it stores your password in the database using MD5. But yeah, I get what you're saying, and the new authentication system will either be salted or use the native password_ functions. I've added the warning marquees everywhere, as well as added a disclaimer at the top of every page. Edit: (I can't double post) I wiped the user accounts on my test board, because the new login system is incompatible with it
---------------------------------------------------------------- Nightly 07-26-2018 has been released. -------------------------------- Version Changes -------------------------------- *Software now released under the Affero GPL license. +A new encrypted login system has been implemented. I'm still deciding on how well I like it, so it's subject to change. +Began documenting and formating a few pages +Fixed a profile.php bug thanks to Jamie ____________________ |
| NinLenna |
| ||
|
Shyguy Level: 17
Posts: 84/98 EXP: 21806 Next: 2937 Since: 09-06-17 From: World X Pipe Last post: 49 days Last view: 24 days |
Been a while since I put a release here
Prerelease 09-23-2018 has been released. -------------------------------- Version Changes -------------------------------- So many things, but all pages are at least mostly functional now. ____________________ |
| Elemi |
| ||
|
Trap Level: 34
Posts: 241/279 EXP: 236533 Next: 17118 Since: 01-05-12 Last post: 19 days Last view: 4 hours |
Elemi's Post Keeping the legacy alive!
Very happy to see finally a version that brings all the basics and should offer people a simple clean base to work from! I'm tired of trying to shave Acmlmboards and breaking everything the getting bamboozled. I'm gonna keep an eye on this, your work is appreciated! Live ~ See ~ Do |
| Main - AcmlmBoard Developer Zone - [WIP] Experimental Acmlmboard 0.7 fork (1) |
 Acmlmboard v2.5.4 (01/20/2019) © 2005-2019 Acmlm, Emuz, et al. |
|
MySQL - queries: 156, rows: 514/548, time: 0.047 seconds. |
