(Oct 4, 2016 11:17 AM)Omniscient Wrote: I don't support userscripts. You should disable them and contact the author.
Fair enough, will do.
(Oct 4, 2016 11:20 AM)Jаson Wrote: For the userscripts you'll have to add http*://hackforums.net/*
Worked perfectly, I'll probably do this and see what the author says.
DO NOT DEAL WITH THIS MEMBER
(Oct 4, 2016 11:29 AM)Steve Wrote: Worked perfectly, I'll probably do this and see what the author says.
You should also change any https://hackforums.net and https://hackforums.net to https://hackforums.net and https://www.hackforums.net respectively in your user script, although a better solution is to just remove that whole part from the URLs, that way your script is now compatible with other MyBB forums as well if you ever wished to use it on any of those.
Oct 4, 2016 11:42 AM
(This post was last modified: Oct 4, 2016 11:42 AM by Reece Morgan.)
(Oct 4, 2016 10:03 AM)deject Wrote: Getting my credentials compromised via MITM is my FETISH! I like to be in the middle if anyone is curious. ;)
This comment makes me so mad.
Drink all the booze, hack all the things.
hackirc.net
Plex. That is all.
DO NOT DEAL WITH THIS MEMBER
This is a wicked update, thanks.
DO NOT DEAL WITH THIS MEMBER
(Oct 4, 2016 10:42 AM)Omniscient Wrote: This user has an image in signature which will break the HTTPS.
https://hackforums.net/member.php?action...id=2219785
Their image is on a site with no HTTPS support.
http://715.wf/sharex/images/gif/AS413.gif
That member has almost 10k posts. Any thread page you view with his sig will break full HTTPS security. Even worse if you have your browser set to strict settings the pages may not load at all. That is the real problem with this. The HTTPS protocol should never have required CSS and images be part of the protocol.
You have to agree though my signature is worth it 😕
No but I'll look into getting an SSL certificate or whatever grants my site https. I don't know the first thing about domain management
(Oct 4, 2016 11:45 AM)Cammy Wrote: You have to agree though my signature is worth it 😕
No but I'll look into getting an SSL certificate or whatever grants my site https. I don't know the first thing about domain management
Cloudflare offers free SSL
Oct 4, 2016 11:55 AM
(This post was last modified: Oct 4, 2016 11:57 AM by Sholi.)
(Oct 4, 2016 11:45 AM)Cammy Wrote: You have to agree though my signature is worth it 😕
No but I'll look into getting an SSL certificate or whatever grants my site https. I don't know the first thing about domain management
Doesn't matter if you do. There are 3M+ members on this forum and people are constantly sharing images/stuff from HTTP sites. Problem is bound to repeat itself.
Even Google Images has broken HTTPS because of the images that are displayed from 'non-HTTPS' sites. Either get used to it, or screw the whole thing. Lol.
I may alter more of MyBB and force HTTP usage for avatars, signatures, and even img tags. I hate half-ass solutions so I may end up doing full 100% HTTPS support and then go strict.
I am reviewing code now to see what it will entail. Basically need to alter all functions that deal with images.
(Oct 4, 2016 11:59 AM)Omniscient Wrote: I may alter more of MyBB and force HTTP usage for avatars, signatures, and even img tags. I hate half-ass solutions so I may end up doing full 100% HTTPS support and then go strict.
I am reviewing code now to see what it will entail. Basically need to alter all functions that deal with images.
Thank you Omni!
"Design must be simple. Elegant. Implementation, less so. Sequences must change. Intent static, product fluid. Always can improve. Stressers reveal flaws. Flaws reveal potential. Always improving. Good."
DO NOT DEAL WITH THIS MEMBER
(Oct 4, 2016 11:53 AM)Tommy Chong- Wrote: Cloudflare offers free SSL
I'm setting that up right now
Meanwhile omni banned my signature space for a week but hopefully setting up https won't take that long 😊
Oct 4, 2016 12:23 PM
(This post was last modified: Oct 4, 2016 12:30 PM by SIM-3257834.)
Ah going to miss the days I did mitm attacks to myself.
DO NOT DEAL WITH THIS MEMBER
I feel a faster browsing from mobile now, will have to see about desktop later. Thanks for the great updates Omni!
DO NOT DEAL WITH THIS MEMBER
I have no delay at all, not faster either. Just normal. Nice change I guess, atleast stops all the discussions of people requesting HTTPS over and over.
Going full https will probably be the best, you were planning to upgrade mybb sometime soon too, idk if what you're doing now may have to be repeated after... but i was looking forward to the update.
Nothing have changed for me, it's the same load times as it has always been.
|