LegendBegins

Mahz's Dev Journal

I'd like to submit a bug report. It seems impossible to enter empty titles now without using a linebreak (\n). Previously, it was possible to remove the user title by submitting it while empty.

Mahz's Dev Journal

@Bishop

At that point, I would be able to create X number of RPs and ban one player from each of them, just to destroy their reputation on the Guild. GMs should have power in their own business, but not in the business of others.

Mahz's Dev Journal

@Ellri
It was a page on a multi-thousand page RP.

@Mahz

No problem; it was, on a page high above a thousand. Perhaps scrubbing all commas from the input might help?

Myriad Reality

Mahz's Dev Journal

did you try using decimal numbers for page count, @LegendBegins?

@Ellri

It would be an appropriate error if I were. In other words, no, I did not.

Mahz's Dev Journal

The new page selection system is throwing an error: "Page must be an integer."

Mahz's Dev Journal

@Mahz

If I may, I also believe an easy account-switching feature would be a great boon. Don't overload yourself though.

Myriad Reality

...

Mahz's Dev Journal

@Buddha

I mean to point out that images doesn't necessarily mean only images. One thing can lead to other holes, and while it's unlikely, and I, like you "couldn't care less" in the meantime, it does need to be on the list eventually.

Mahz's Dev Journal

<Snipped quote by Mahz>

What would the drawbacks of that be though? If it has any drawbacks at all it wouldn't be concerning to be at all given that we have a relatively low need for security anyway. I mean we're not taking bank account details or private info here, so eh..

@Buddha

While I agree that it should not be a top priority, security should always be taken into consideration, because it can lead to other issues. If you never implement security, it can lead to holes that cause harvesting of usernames and passwords that may be duplicated on other sites or worse, lead to the Guild itself being compromised. So while this is a small issue now, it is never a good idea to throw security into the bucket of "things to do eventually."