Cyberix Backend Reset Thread [PINNED]
2 replies
5 attachments
Started >30d ago
5 attachments
Started >30d ago
IRC logs:
```txt
Anyway, I've been having several ideas as to what a unified account system is. Some fuck on the team thought it was a good idea to rewrite the auth system two weeks after I released the new site and now bans aren't applying properly in the mod panel anymore
<developer> You can literally just change your user agent to evade a ban now. You can create a account for permanent attachment archival, spam CP, get banned and log back onto that account from a different browser and continue spamming
<developer> UserAgent extensions make this a trivial process
<developer> This is retarded. This is because we have two separate tables that honestly should be combined: users and posters
<developer> Right now, 'users' is just a table for every single account registered on the forum. When you register, the system goes into the posters table, finds you, and tacks on the user id to the user_id column. This is why there's a "WARNING: Once registered, any anonymous posts you've made will be automatically associated with your new account" warning on the register page
* Web1807 (~u@2wa3jaspwh396.irc) has joined
* Web1807 has quit (Quit: Done)
<developer> Bans right now seem to only target the poster_hash, which is IP+ user agent
<developer> This is why it's possible to evade bans by changing the UA and why logging into a user doesn't extend the ban over to the new poster
<developer> This is a very stupid design
```
Well, I can say that the current system on cy-x.net has two conflicting ways of identifying a user of the site for some odd reason, and the one that bans target is the one that's based off of IP *and* user agent rather than just IP addresses, so you could be banned on a user account and all you'd have to do is change your UA and you'd be unbanned. You can even log into the same account and it won't spread to you because the bans don't target user accounts.
My primary goal with the backend reset is to reduce entropy in the codebase and ensure it's doing everything as efficiently as possible.
Bans will primarily target IP addresses and user identities. It'll also let me ban subnets again.
New thread design.
Visually more appealing and informative than what we have now without triggering the mental illness that plagues 98% of the individuals who use the modern web.
The illness in question? People see an old date or a small number attached to a thread and then choose to not click on that thread or decide to just leave the entire site because it's "too old" or "a dead website" (ignoring it KEEPS it dead, you fucking moron!)
# Open to pretty much anything right now. Backend reset is slowly coming along nice, but I still am trying to reduce codebase entropy before moving onto anything bigger.
```txt
Anyway, I've been having several ideas as to what a unified account system is. Some fuck on the team thought it was a good idea to rewrite the auth system two weeks after I released the new site and now bans aren't applying properly in the mod panel anymore
<developer> You can literally just change your user agent to evade a ban now. You can create a account for permanent attachment archival, spam CP, get banned and log back onto that account from a different browser and continue spamming
<developer> UserAgent extensions make this a trivial process
<developer> This is retarded. This is because we have two separate tables that honestly should be combined: users and posters
<developer> Right now, 'users' is just a table for every single account registered on the forum. When you register, the system goes into the posters table, finds you, and tacks on the user id to the user_id column. This is why there's a "WARNING: Once registered, any anonymous posts you've made will be automatically associated with your new account" warning on the register page
* Web1807 (~u@2wa3jaspwh396.irc) has joined
* Web1807 has quit (Quit: Done)
<developer> Bans right now seem to only target the poster_hash, which is IP+ user agent
<developer> This is why it's possible to evade bans by changing the UA and why logging into a user doesn't extend the ban over to the new poster
<developer> This is a very stupid design
```
Well, I can say that the current system on cy-x.net has two conflicting ways of identifying a user of the site for some odd reason, and the one that bans target is the one that's based off of IP *and* user agent rather than just IP addresses, so you could be banned on a user account and all you'd have to do is change your UA and you'd be unbanned. You can even log into the same account and it won't spread to you because the bans don't target user accounts.
My primary goal with the backend reset is to reduce entropy in the codebase and ensure it's doing everything as efficiently as possible.
Bans will primarily target IP addresses and user identities. It'll also let me ban subnets again.
New thread design.
Visually more appealing and informative than what we have now without triggering the mental illness that plagues 98% of the individuals who use the modern web.
The illness in question? People see an old date or a small number attached to a thread and then choose to not click on that thread or decide to just leave the entire site because it's "too old" or "a dead website" (ignoring it KEEPS it dead, you fucking moron!)
# Open to pretty much anything right now. Backend reset is slowly coming along nice, but I still am trying to reduce codebase entropy before moving onto anything bigger.
Attachments will now auto-embed to the right side of posts.
More additional layout enhacnements