So, because the forums are "https" and the game client already has an "http://" to web links, we now cannot link forum threads in channel MOTD's and such.

You vikings are smoking some extremely strong stuff up there. Maybe you should cut down.

Jeeezzz...

I would hire a new intern for this project. You should have fired him the last time you put these crappy forums up but to let them continue to strip ALL usability from a forum is a new level of fail on CCP's part.

I said it earlier. HTTPS implementation was merely a patchwork because CCP has nobody versed in forum security. Instead of learning something or hiring someone who knows something, they simply went with HTTPS. Hint to CCP: https is designed for specific instances. Unless you are sharing sensitive financial information with this site why the hell are you using https instead of programing proper scrubs, checks, and simple urls.

Browsing the forum with your url structure I've learned quite a bit about your database structure since you expose so much in the url. This thing will likely be taken down with some injection attacks which your https scheme can't stop. You need proper coding. Oh don't say you can't do simple urls, I've looked at the highlights of yaf and simple urls is one of their listing points (not selling point since it is freeware). instead you don't know how to implement or chose not to when you really messed with the coding.

edit: open the pages in a simple DOM viewer. almost all your code is plain text, you only used obfuscate on direct path in the code. OMG why would you put full paths in your publicly view-able code??

I have no idea what you just said...
But Daym...


It smells like CCP really can't program?



I was under the impression that we were just trolling them when we say that they can't...

Have trust and confidence in CCP.

They will fix it.




looooooooooooooooooooooooooooooooooooooooooooooooooooooooool

Thank you.
I'll look at this tomorrow morning.

The smoking or the linking?

@ISD Libertina: it doesn't work.

I would hire a new intern for this project. You should have fired him the last time you put these crappy forums up but to let them continue to strip ALL usability from a forum is a new level of fail on CCP's part.

I said it earlier. HTTPS implementation was merely a patchwork because CCP has nobody versed in forum security. Instead of learning something or hiring someone who knows something, they simply went with HTTPS. Hint to CCP: https is designed for specific instances. Unless you are sharing sensitive financial information with this site why the hell are you using https instead of programing proper scrubs, checks, and simple urls.

Browsing the forum with your url structure I've learned quite a bit about your database structure since you expose so much in the url. This thing will likely be taken down with some injection attacks which your https scheme can't stop. You need proper coding. Oh don't say you can't do simple urls, I've looked at the highlights of yaf and simple urls is one of their listing points (not selling point since it is freeware). instead you don't know how to implement or chose not to when you really messed with the coding.

edit: open the pages in a simple DOM viewer. almost all your code is plain text, you only used obfuscate on direct path in the code. OMG why would you put full paths in your publicly view-able code??

And how does knowing the information contained in the url allow you to cause harm?

Thank you.
I'll look at this tomorrow morning.