Jump to content

PlanetMaster

Apprentice
  • Posts

    51
  • Joined

  • Last visited

  • Days Won

    1

Everything posted by PlanetMaster

  1. That text is compiled in the javascript and cannot be changed. There is way but its too complex for those without scripting knowledge.
  2. First of all restore the original template to fix the page. Secondly that code from the tutorial is ancient and will not work for IPS 4.6. Thirdly there is nothing in that code you posted that changes the size of the avatar. You can do that easily from CSS do not change the template code.
  3. Doesn't chatbox have its own style sheet(css)? Find them in your themes area of ACP, find the class that controls input text, and modify the color. Better to just use a custom override in custom.css if possible.
  4. English speaking forum, please translate the error so we can help. Thanks
  5. Or be smart and generate SSL from Lets Encrypt. trusting your web to 3rd party providers is NOT secure in the least bit.
  6. if you are using the InnoDB database engine, and your should be, there is no repair function. Easy way to fix? Back up DB and delete the duplicate primary key from database. Done!
  7. Had this issue before or similar, PHP sessions are not being written. Check your php.ini settings for sessions, if using files for sessions make sure the path is correct, exists and is writable by the webserver. If using Redis with password make sure configuration in php.ini, redis.conf and IPS is all the same.
    Like @BogdanwI am getting the network error and my network is fine (FIOS). Ran some tests and its the server that keeps resetting so it is on your end. Was able to get it on my 8th try. Ran netstat/ping from my server to yours and waited for the network reset to finish and then grabbed it. Your network resets every 3-4 minutes that's a problem and very unusual, take it from someone that has worked on thousands of servers over 24 years.
  8. 2 faux pas here. First never edit the IPS base files as they will get overwritten with updates, write a simple plugin that will hook into the file and change/replace the desired behavior Secondly the time is there for a reason, the 30 min cache of member online data is to lighten the load especially on busy large communities. I would never go under 15 minutes unless you want a slow and dragging website.
  9. The error is simple the row reportData doesn't exist in your forums_posts table has nothing to do with the theme. Since its a fresh install seems you are missing a plugin/application that requires that field. Have you installed or uninstalled any apps? That is not a default row for IPS forums_post table so its an issue with something else you installed or uninstalled at some point. If it was an install, its not properly setup or needs updating. If it was an uninstall, some dirt was left behind and still looking for that row.
  10. Are you running Apache or Nginx? If its Nginx the .htaccess is worthless. You need to set the rewrite rules in your domains vhost file and then enable friendly URLS. location / { index index.php; try_files $uri $uri/ /index.php?$uri&$args; rewrite ^ /index.php? last; } Could also be an issue with PHP sessions.
  11. Make sure your domains vhost file has the proper nginx rewrite for IPS, this will fix the redirects. location / { index index.php; try_files $uri $uri/ /index.php?$uri&$args; rewrite ^ /index.php? last; }
  12. Exactly where you'd think they would be under the forums_ tables forums_forums is your starting point forums_answer_ratings forums_archive_posts forums_archive_rules forums_forums forums_posts forums_question_ratings forums_topics forums_topic_mmod forums_view_method
  13. As long as you have a backup of the database and any uploaded media, the application core of any application, can be updated to its newest version or ported to another application. My media community turns 18 years old this December and it was started on IPB 1.0 free a long time ago, we are now running 4.4.6 with our original posts and media uploads from all those years ago.
  14. Hate to break the news to you but your site fails for security and privacy and there is no reason to expect your clients wont have the same problems. You don't support TLSv1.3 which is mandatory and an automatic fail for any business if not present. You still support TLSv1.1 which should not be supported by any business where clients submit private and financial information. You totally fail on your security headers Your DNS is wide open for network attacks No DNSSEC No Dane Your email server is non existent, a business must have a secure email server at their domain or who the hell knows where client email is going and who can access it in plain text, in your case its a mystery cause couldn't find an MX record No MTA-STS No TLS-RPT Session cookie is not secure no HttpOnly cookies no samesite, easy to hijack sessions here Weak ciphers, Server doesn't enforce cipher suite preferences, No forward secrecy and authenticated encryption Grade F - Sorry buddy sure your intentions are good and want to run a honest successful business but I cannot recommend anyone use this host. I would never input my data into your site knowing any malicious user with a little knowledge can access it. My recommendation is that amazing support, cheap, and reliable are irrelevant if you cannot guarantee your clients safety or at least attempt to try so please look into the simple configuration and steps that you can take to get to a safer rating for your business it will only benefit you and your clients. I didn't do a full scan cause I saw from the beginning this was a failure across the board, more info here
  15. Understood but you put your web presence and any members/clients at risk by using old and vulnerable software. Not to mention it wont be supported anymore in browsers, people wont even be able to get to your site and that is happening as we speak. Older browsers and devices running older OS's are finally and rightfully being dropped from compatibility. Anything that doesn't support TLSv 1.2 or higher will be obsolete by mid 2020. My company already dropped support for these as well as mail carriers that don't required end to end TLS encryption . Its tough I know firsthand as a developer and programmer but the negatives far out way any positives (of which there are none really) of updating applications. If a vendor fails to keep their software updated and compliant then you have to make the decision to move on or be left behind its that simple. Security and privacy are the biggest and fastest growing concerns now and people are more aware with all the news of hacks to mainstream sites. With tens and hundreds of millions of internet users personal info being stolen or sold it is imperative all site owners take great interest in the rapidly changing web security landscape. It's no longer a question of should I its a matter of I have to or fade away. Any legacy software can be updated today with less heartache than you think. The explosion of development, frameworks, and countless tools make it not only possible but easily conceivable. I would try my best to find a solution it will only benefit you and your users. You can PM me if you want and tell me what type of software you are running, maybe I can give some sound advice or point you in the right direction.
  16. Just reading through some of the topics here it is quite clear many members are not aware of the important things to look for when choosing a host. The most common response I see is "They look nice", which to me is scary. Free Analysis I will give any member a free overall report, comprehensive evaluation, and grade of a current or perspective host. Just post answers to the following questions. Host URL? Your sites requirements? (IE what type of software will you be running, Forums, CMS, Wordpress, Laravel, React, etc) E-Commerce Enabled? (Will you be taking orders? Selling products or services? Donations? Resource Requirements? For beginners starting new sites this is less important but if you have an established site with a few or allot of members/clients please answer IE small, medium, big, huge) Please be patient I will try and get to them every couple days as time permits, will do no more than 2 or 3 a week as they are time consuming. You will get a expert and honest analysis using my 20+ years of system administration experience, security expertise, and understanding of how hosting, and more importantly, how systems work. What to Look for When looking for a host the first and easiest way to judge them is to evaluate how they run their own site and server. If they run a poorly configured server/site, lack standard security compliance, do not offer client privacy and applications efficiency then its a good bet your hosting will be as poor if not poorer as well. If they are at the very least compliant with today's security standards and privacy policies as well as efficiency of their own applications than there is a good chance your hosting will have the same care. If they go beyond standard compliance in all areas and embrace modern security, privacy, and technology practices than I would say put them on your list. That is what you want to look for. And its not about money, a better run host will not necessarily be more expensive than a poorly run host because of its higher grade in any of these areas, its just that they have better administration and are concerned more about their clients than their bottom line. Hosting Basics Highly recommend, if possible, choose to host on a VPS or dedicated server. Control, control, control its that simple. If running a business or e-commerce domain you must use dedicated server or VPS, shared hosting for e-commerce or any domain that takes client info is a no no and will only hurt your business. if the server is compromised your clients will no longer be your clients and you can kiss your reputation and business goodbye. And believe me these servers are compromised everyday. Shared hosting is dead and discouraged. You are at the mercy of other clients and their domains, if they use insecure practices/applications that allow a malicious user to gain access to the shared server, your domain is compromised as well. In most cases a VPS is cheaper then shared hosting anyway and there are no other clients that could put your domain in jeopardy. In addition you are afforded the full resources of your container and not dependent/effected by other users resource usage. I understand not everyone can afford professional hosting but using a free host isn't the solution. Matter of fact most are so badly configured that it isn't even worth the multitude of negative possibilities and consequences. Instead go local and design your own dedicated server on your PC and use a DNS service to connect your domain to the internet. It is not difficult and you can run your own server for free even on Windows 10 using Hyper-V. Do not use sub domains of free or paid hosts ever! You can get a domain for about $10 a year and even cheaper in most cases. I pay $8.88 at NameCheap and in my own opinion and experience being with them for 10 years are one of the top in the business. Support is incredible and the domain administration is complete with modern technologies available.. It is well worth it. having a sub domain of someone else's domain means you don't really exist. Your web presence is not your own but another's. If you are only testing or developing your application then again use a local VM. When developing or testing you cannot get accurate results unless you have full control of all the applications that effect and run your site. Support is important. of course, but it seems that most base their decision on that one factor and honestly its less important than you think. If a hosts domain and server are run well than it stands to reason the support will be above average cause they put the work in for a reason. If a host is poorly run expect sub par support. So that aspect is not a determining factor as much as people think it is. Finally if all the above check out positively than you should also see if your host is setup to make it easy to expand your domain. If you are or expect to grow, you want a host that will allow that growth without any growing pains. Rules of thumb Unlimited disk space is a lie and doesn't exist because there are limits on disk space and more space costs more. If your host says unlimited off the bat you are dealing with a dishonest or not so truthful host. Read the fine print and you will see. Any host that limits bandwidth is not worth your time and effort. Unmetered is standard and included, premium bandwidth may cost more but again it should and must be unmetered. Take some time and learn the basics: Command line usage, the language your application is programmed in, If using Linux OS (Recommended) get to know it a little, understand the function and purpose of the applications (PHP, MySQL, PERL, etc) required to run your domain, and very important modern security standards. Have fun and be creative that will get you far online. Ask for help on forums like these and the hundreds of others that deal with development and getting your domain online. For Business owners spend a little to get back allot. make sure your security is top notch and always cater to the client, the most important person in your business. Personal Advice If you can afford it, your site size demands it, and you need the resources than go dedicated, it is the most complete and most secure way to control your web presence. Far more efficient and secure than any cloud platform. Dedicated servers are cheap comparatively speaking these days and you can get a small dedicated server for under $40 a month and even as low as $25 for a decent box. As a next best thing alternative get a VPS and expand your plan as your site grows. DO NOT use Wordpress if you are running or plan to run a business or e-commerce site. It is one of the most insecure applications online and the scary thing is everyone uses it for its ease and multitude of plugins. Unfortunately 98% of those plugins are created by copy and paste scripters who have no knowledge of security in PHP or on the server side itself. Its is a favorite of hackers because of its poorly developed structure, as predictable as they get. Every Wordpress site on this planet has been or is being hacked because it is easy. If you are a online shopper never put your financial info into a site that is built with Wordpress, its is not advised and will most likely be scooped up. The reason is Wordpress can be accessed in a multitude of ways by a hacker without the knowledge of the owner and they will just wait till a client/customer makes a purchase, adds their info, and it winds up on the dark web. Make sure your host supports PHP 7.1 or higher, 7.2 is recommended now. I still see people using PHP 5.6 and that is foolish and quite plainly stupid. Always use the latest version of your main applications for the most up to date security and features. Those legacy arguments have run there course over the past decade but times they are a changing, either upgrade or step aside sir cause in the next couple years all that compatibility, which I believe has gone on way too long at the expense of the majority, will be gone. Sites and software that are not compliant will not be accessible by modern browsers plain and simple. Use Nginx please! I switched from Apache 10 years ago and never looked back. For features, efficiency, and security it is the way to go and any site, especially large and busy ones. It will out perform Apache by leaps and bounds if running on a properly configured system. Most long time and experienced system admins will tell you Apache is dead and I subscribe to that as well. There is nothing you can do on Apache better than on Nginx quite simply. Lighttpd is a good alternative but IMHO Nginx beats them all. Get a security and privacy audit if you are running a business or e-commerce site. it may cost a few bucks but will save much more down the line if you don't. Your business relies on clients which means you must provide a safe and secure environment on your site/server or you wont have too many of those clients. Showing perspective clients that your take great care and interest in their security and privacy is top of the list in 2019 and beyond. Going cheap or not caring will result in no business period. Most importantly after you are firmly established with your hosting and in production site, be a visible Owner/Admin. Nothing gets members and clients interested than a friendly and, dare I say, social owner. 80% of your clients/members will come from being genuine and conversing with your users. Be personal and involved, even for those who are shy in social situations, its the web and they cant see you so loosen up and take pride in your site and its membership. Host Review DarkHost LTD darkhost.ro (Original Post) So I am going to do a full evaluation here of one of the hosts that were listed in this forum. Funny because it goes back to my opening sentence of "They look nice" responses. No offense to the posters in that topic or the owner. Look at this as a free expert evaluation and how now the server/domain/business can be improved being made aware of issues that may need attention. Test 1 - Encryption SSL/TLS | Grade F | Rating Non-compliant Test 2 - Security Headers | Grade F - | Rating Non-compliant Test 3 - Mail Server TLS |Grade F | Rating Non-compliant Test 4 - DNS | Grade D- | Rating Needs Improvement Test 5 - Applications | Grade F | Rating Non-compliant Found lots of issues elsewhere on the server and some tests I didn't even bother to run, it was obvious what the results would be. Overall Grade: F Urgency - Critical This site is unsafe for any client information submission. There are multiple critical vulnerabilities across all applications, software, and configurations or lack there of. Not quite Swiss cheese as far as holes but not far off either. What advice I would give potential clients: Stay far away from this business What advice would I give the owner: @Cyb3r DDoS Get a dedicated server, you cannot run a hosting business or any other business on shared hosting, you must have full control of your domain. Who ever your host is doesn't care about your security and privacy and you are passing that along to your clients. All of these issues are easily fixed and you can get an passing A+ in every category but you cannot depend on your host to fix them. It is either all in for your business or step aside cause no one in their right mind can use this service with confidence as it is now. Matter of fact I would be terrified to type my personal or financial info into this sites forms. Also I notice WHMCS as your shopping cart, no matter how much WHMCS secures their application your server configuration basically nullifies any protection the application offers. You can PM me if you have any questions. One more thing Looks can be deceiving
  17. Absolutely not! Off the bat you are setting a bad example for new members, dishonesty. Instead do the smart thing and post yourself as an Admin. post topics on your sites theme and what you want to do with it in the future. Post an inviting message so users can see this and may want to join cause they like your message. Post tutorials about how to use the site. Most importantly post about your site! Be genuine and the members that join will be those that are there for you and not for a user that doesn't exist. Be the sites owner and admin that's who users want hear from and will join because of.
  18. I agree it may not be feature rich and action packed but it is solid and good enough to use as an e-commerce platform. The issue I think most have is its styling, a store that looks like a forum, plain, and not visually appealing at all can be a turn off. This is done by design for all the IPS applications though styling is not as important as the app functionality. This is where templating comes in cause they leave it to you to design an exciting, visually appealing interface and as a developer I can appreciate that. Lets me decide and control how it will look and fit into my sites theme.
  19. Well it's how you view it. The application is only as secure as the system it runs on. If you don't secure your system and do all that is needed to protect the front end applications then it will be weaker even if it is well maintained and updated regularly. IPS does a very good job at patching know weaknesses when they are discovered but it also fails, miserably in some cases, in order to provide features that are dangerous if you don't know what you are doing. And that's where the problem lies cause most casual forum users haven't a clue about securing their site and server. The caveat is no matter how secure you make software it will always be vulnerable cause code can be changed, exploited, and manipulated. A world doesn't exist where software is perfect cause logic and the laws of nature deem it so.
  20. What software is this? Looks like IPS, avatars next to last poster on forum index is a default standard feature. All the boards I run have it. Is that a custom theme?
  21. Can you click on inspect element in browser, go to Network tab, and F5 (refresh) Go to the DOC tab and click on the site address. post your headers here Also try and post an embedded link with the inspector open and the console tab visible, do you see errors when trying to embed? If so post them. Most errors can be debugged and resolved using the inspector (developer tools) that is available in every browser
  22. Create New Topic and schedule the date and time of open access (Unlock Time). Note the topic will show but be locked to posts until unlock time.
  23. PlanetMaster

    Error Ex0

    Simple error but resolution needs more info. An invalid argument in the pssteamwidget. Can you post contents (In code box please) of the pssteamwidget.php so we can see the code?
×
×
  • Create New...