220 replies to this topic

[GravityScore]

CastleMan2000, on 23 January 2013 - 05:31 AM, said:

Come on, Grav, when will the server be back up? It's been over a week!

I know! All the PHP is written, I just have to test it. Over the past few days, I had some trouble with where to host them, but I got that sorted, and there now back with lieudusty Now the only problem is my stupid Italian hotel's internet! It won't stay connected for more than 20 minutes, before it drops out and doesn't let me connect for another half hour. I'm travelling home to Auzzie tomorrow, so Dday should be at most Friday! (Note: this does not account for the need for any major changes that possibly may be needed, or sudden events that may occur and prevent me from testing and completing such as database downtime).

[pielover88888]

It's almost as if the universe doesn't want us to have email across networks via php and computercraft.. hmm..

[anonimo182]

Agree...

[Shnupbups]

Geez, 1-2 days sure lasts a VERY long time.

[Shnupbups]

1-2 more days = 1-2 more months?

[Skullblade]

Yeah gravity have u abandoned this project? I hope u didn't it was really good

[GravityScore]

Skullblade, on 02 February 2013 - 01:03 PM, said:

Yeah gravity have u abandoned this project? I hope u didn't it was really good

Yes I had abandoned it for a while here due to an error which I just couldn't see how the hell to fix, but after you said that, I went back and took another look at it, and... the error was about the stupidest mistake I could possibly make - a spelling error

So basically - I fixed it, and expect 1.1 to be released today!

[Shnupbups]

GravityScore, on 02 February 2013 - 08:37 PM, said:

Yes I had abandoned it for a while here due to an error which I just couldn't see how the hell to fix, but after you said that, I went back and took another look at it, and... the error was about the stupidest mistake I could possibly make - a spelling error

So basically - I fixed it, and expect 1.1 to be released today!

Hip hip! Hooray! Hip hip! Hoo-WAIT! A spelling error??????!!!!!!!!!!
RRRRRRRRRRRRRRRRRRRRRRRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGGGGGGGGGGGGGGGGGGGGGGGGGGGGGEEEEEEEEEEEEEEEEEEEEEEEEEEE!

[GravityScore]

Shnupbups100, on 02 February 2013 - 08:52 PM, said:

Hip hip! Hooray! Hip hip! Hoo-WAIT! A spelling error??????!!!!!!!!!!
RRRRRRRRRRRRRRRRRRRRRRRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGGGGGGGGGGGGGGGGGGGGGGGGGGGGGEEEEEEEEEEEEEEEEEEEEEEEEEEE!

That more or less covers my reaction to it xD

[GravityScore]

It's back

EDIT: crap I think there may be something wrong with salting... The person who just created the account owned, can you successfully log in? When I create a test account, I can salt properly, but looking at the SQL database, the salt for the account owned looks stuffed up...

EDIT 2: huh... Shnupbups account's salt worked fine...

[Skullblade]

YAY its back
YEEEAAAAAAAY!!!
*le opens minecraft**le downloads program*

EDIT: le hates to spoil the party but i seem to be having a bug....when ever i try to email someone i get a recipient doesn't exist error...even when i copy paste the name in....might be me

[MudkipTheEpic]

Skullblade, on 03 February 2013 - 04:59 AM, said:

YAY its back
YEEEAAAAAAAY!!!
*le opens minecraft**le downloads program*

EDIT: le hates to spoil the party but i seem to be having a bug....when ever i try to email someone i get a recipient doesn't exist error...even when i copy paste the name in....might be me

It works for me.... idk what's wrong...

[Skullblade]

ill redownload it

EDIT: OOOOOMMMG the stupidity it burns!!! I was typing the usernames into the subject place because im used to having To: at the top.....i am one stupid person....

EDIT EDIT: now its working apparently the program cant read your mind and find who you REALLY want to send the message to

[CastleMan2000]

Woohoo! It's back!! Don't forget to update your sig

What kind of new security measures did you put in?

[lieudusty]

CastleMan2000, on 03 February 2013 - 07:30 AM, said:

Woohoo! It's back!! Don't forget to update your sig

What kind of new security measures did you put in?

GravityScore surrounded the server with Iron Golems.

[Shnupbups]

List of users offline?

[GravityScore]

Shnupbups100, on 03 February 2013 - 06:57 PM, said:

List of users offline?

Well, I was speaking to mk352 and he had some devious ideas which I probably shouldn't iterate here. It involved parsing the HTML and gaining a list of users to perform malicious tasks with. Then again, with the security in place he can't really do much. I'll probably put it back up again.

CastleMan2000, on 03 February 2013 - 07:30 AM, said:

Woohoo! It's back!! Don't forget to update your sig

What kind of new security measures did you put in?

Updated sig, thanks

Security measures:
- HTTP Post only (no web browser use)
- 1 message sent every 2 seconds
- Certain number of messages (don't want to say) sent from an account before it starts deleting old ones
- Certain number of accounts (don't want to say) per IP address
- Deletes messages that have the exact same information (to, from, message, subject, etc...)
- Only alphanumeric (plus _, /) characters in everything but the message and subject, which are mysqli_real_escape_stringed
- Protection against SQL injection using prepared statements and mysqli_real_escape_string
- Passwords are SHA-256ed client side, sent to server, combined with a 64 character salt, then SHA-512ed server side, then added to the MySQL database
- Lieu and I can block IP addresses in the iptables and in a special blocking list in the PHP
- Logs every action performed by anyone, with their username, IP address, action, return status, etc... (this table also has spammer protection)
- And a secret security feature I wish not to mention

[theoriginalbit]

GravityScore, on 03 February 2013 - 07:11 PM, said:

- Deletes messages that have the exact same information (to, from, message, subject, etc...)

I that like a spam bulk email prevention, or more of an accidental duplicate send prevention.

[GravityScore]

TheOriginalBIT, on 03 February 2013 - 08:20 PM, said:

GravityScore, on 03 February 2013 - 07:11 PM, said:

- Deletes messages that have the exact same information (to, from, message, subject, etc...)

Is that like a spam bulk email prevention, or more of an accidental duplicate send prevention.

Spam bulk email prevention (what mk352 was planning to do with MyDoom ). It's not to hard to get around, but still.

[theoriginalbit]

GravityScore, on 04 February 2013 - 02:01 AM, said:

Spam bulk email prevention (what mk352 was planning to do with MyDoom ). It's not to hard to get around, but still.

Cool