Recent site security upgrade

[RyanVM]

I recently enabled HTTPS support for this site, thanks to LetsEncrypt. From all the testing I've done, everything should Just Work at this point, but feel free to comment here if you run into anything odd.

[5eraph]

Thanks, Ryan. Works for me in Firefox 49.0.2 32-bit on XPx64.

[bphlpt]

And it works for me as well using SRWare Iron (a Chrome variant) on Win7x64.

Cheers and Regards

[compstuff]

Thanks for that & everything... Works for me with Chrome 54.0.2840.71

Love LetsEncrypt I use it also

[GH0st]

Works fine for me,

WinXP Pro x86, uSP4, Iron with extensions of "HTTPS Everywhere" and "uBlock"

[RyanVM]

Looks like my CSP policies broke the editor controls (yay inline scripts). I'll work on tweaking them soonish.

[mooms]

Indeed.

[5eraph]

Noticing a couple things since this update. First, the pages never stop loading--need to stop loading the page in order to refresh it (unless you use F5). And secondly, the number of "guest" visitors is consistently about half of what we usually get. We used to have between 15 and 35 guests at any given time; now we rarely get out of the single digits.

[mooms]

I don't have the issue about the never ending loading pages.

[RyanVM]

Noticing a couple things since this update. First, the pages never stop loading--need to stop loading the page in order to refresh it (unless you use F5). And secondly, the number of "guest" visitors is consistently about half of what we usually get. We used to have between 15 and 35 guests at any given time; now we rarely get out of the single digits.

I wonder if there's fewer bots hitting the site or something.

[RyanVM]

I decided to go even more fancy pants and do the long-awaited phpBB3 upgrade too . Obviously there's some work to do still, but everything should at least be ported over now!

[mooms]

I was shocked when I encountered a white and blue webpage !
The editor controls and smileys are still broken.

[bphlpt]

I was, too, mooms. I couldn't find an exact theme like the old one, but there are other options available if you edit your profile.

Cheers and Regards

[mooms]

Thanks for the info, Digi (Dark Blue) & Digi (Dark Blue 2) are cool, but I think the old theme is more readable (maybe I was used to).
edit: but the title of the forum is missing with these themes, we have phpBB instead.

[user_hidden]

hmmmm logged in today and noticed the change.
the forums has become a PhpBB generic theme.

and where did my Moderator powers go ???

[mooms]

and where did my Moderator powers go ???

Sorry couldn't resist

[bphlpt]

Thanks for the info, Digi (Dark Blue) & Digi (Dark Blue 2) are cool, but I think the old theme is more readable (maybe I was used to).
edit: but the title of the forum is missing with these themes, we have phpBB instead.

That's what I thought, too. Hopefully, Ryan will find a theme similar to the old one. That would also be my preference.

Cheers and Regards

[5eraph]

I wonder if there's fewer bots hitting the site or something.

Visitor numbers are back up to where they were previously. And now I can see the actual bots.

Sent you a PM, user_hidden.

[RyanVM]

Yeah, I picked the Digi theme specifically because it was the closest out-of-the-box theme I could find that resembled the old one. I thought I had it properly set as the default one, though. Guess not

TBH, I don't have the time to try to build a theme that matches the old one more closely. If someone's feeling that motivated, feel free to shoot me a PM. Otherwise, this'll have to do

[keloo05]

This update lost a great feature from the old forum: the ability to view posts since last visit (or I can't find it...)
Is there any way you can bringt it back? Or is there any way to see what was being posted since last visit?
Thnak you very much.

[5eraph]

"New posts" is still there, keloo05. There's a dedicated link for "New posts" in the Digi themes in the upper-left corner. In prosilver (or any other theme) click the hamburger icon (three horizontal lines) in the upper-left corner to find "new posts."

[=[FEAR]=JIGSAW]

Works, but don't like the theme ... would like something darker :p

[5eraph]

You can access several dark themes from your User Control Panel. In the upper-right corner of any forum page:

• Click your name --> User Control Panel --> Board preferences --> Edit global settings --> My board style

Select anything but prosilver.

[keloo05]

"New posts" is still there, keloo05. There's a dedicated link for "New posts" in the Digi themes in the upper-left corner. In prosilver (or any other theme) click the hamburger icon (three horizontal lines) in the upper-left corner to find "new posts."

I found it, with the Digi themes. Thank you very much.
Still, the counter which showed the number of new posts is lost.

[mooms]

I have an issue: The site don't remember me, I have to re-login each time I close my browser.

I use an extension, CookieKeeper, to keep cookies from the site I visit often (like RyanVM) and delete the other when the browser closes, but, even after protecting the cookies from deletion, I have to login again if i have closed Firefox.
It worked fine before the upgrade.

edit: never mind, it was a mis-configuration on my end, it works now.

[RyanVM]

Works, but don't like the theme ... would like something darker :p

Happy to add more theme options if you've got suggestions.

[=[FEAR]=JIGSAW]

Works, but don't like the theme ... would like something darker :p

Happy to add more theme options if you've got suggestions.

It's all good, 5eraph pointed me in the right direction.

I was using this theme from a member on this forum

Code: Select all

https://userstyles.org/styles/91535/ryanvm-net-forum-alternative-skin

[mooms]

I still have the login problem after all.
Don't know what to do.

[user_hidden]

mooms

do you have an add blocker running?

[mooms]

Yes, of course, I have multiple content blocker:
Ublock Origin, Noscript, Ghostery, DecentralEyes, but nothing seems to be blocked here, and I don't see why it should prevent the cookies to works.

Edit: I think I've found the problem (and the solution):

I use a bookmark (well, it not a bookmark actually, it's one the most visited Firefox bookmarks, it's important to be precised, because it cannot be edited, at least not easily) to access to the newposts directly:

Code: Select all

http://ryanvm.net/forum/search.php?search_id=newposts

As you can see there is no "s" in the http, that's because the "bookmark" is used since a long time, before RyanVM switched to https.

That's what caused the issue here, because the cookies are set to not be used on hoot, only https, after editing them to allow http, the issue is gone, I am correctly remembered and automatically redirected to

Code: Select all

https://ryanvm.net/forum/search.php?search_id=newposts

When using the url

Code: Select all

https://ryanvm.net/forum/search.php?search_id=newposts

to access the forum with a fresh session of Firefox, even with untouched cookies, I'm still remembered.

[ChiefZeke]

Login problem exists for me - must login every time - no ad/content blockers in use.

[bphlpt]

Well it's most likely on your end, Chief. So how, EXACTLY, do you attempt to login? What link, using what browser, with which extensions installed?

Cheers and Regards

[mooms]

If you use a bookmark or similar, be sure it use HTTPS (see my previous post).

[GH0st]

My browser is remembering me, so it logs in automaticly, so guess its the cookie that keeps the password in it. Which my CCleaner deletes all cookie except the ones I choose to keep, so I dont have to remember to login each time.

I really dont like this new changes at all ... of coarse I am a man who does not like change, which is why I stay with WinXP!

I know all updates are for security, so, will learn to like it at some point

[mooms]

Then delete all cookies from ryanvm.net, reboot the browser and try to log again, then see if it remembers you.
If you use Firefox, I recommend this extension for the management of your cookies, even better than CCleaner: https://addons.mozilla.org/firefox/addon/cookiekeeper/

[GH0st]

It works for me, just fine. No problems here at this time! CCleaner saves/deletes cookies fine for me

[Dibya]

Thanks Admin for Upgrade

[RyanVM]

I just updated to phpBB 3.2.0 and naturally it broke the theme we were using (well, it was somewhat-usable but broken enough to be annoying). I've reverted back to the default style for now, but I can assure you that I'll try to get something less fugly installed as soon as possible.

[RyanVM]

I've installed two new themes that are compatible with 3.2.0 (not a lot to choose from, so they'll have to do for now) - Cynthia and Lucid Lime. I've set Lucid Lime as the new board default for now.

[GH0st]

I am happiest with "ProSilver" theme. Easy on the eyes. I found some of the other ones were hiding stuff on me. Couldn't find the buttons for "Quick Links", which I use daily

Thanks for the updates!!!

[=[FEAR]=JIGSAW]

Lucid Lime is perfect as a default

[=[FEAR]=JIGSAW]

Is there a way to get 'external' links to open in a tab/window ??

[mooms]

TabMixPlus for Firefox have an option for that.

[=[FEAR]=JIGSAW]

Will give it a go, but I was refering to this site's settings ?