Just a few suggestions

[Daniel15]

Just a few suggestions for SMF I had:

In the documentation:

• 
  

  The smileys shown here are the standard set from the SMF default theme and may differ from forum to forum.

  It actually shows the smilies from the default set on the forum, not the default SMF smilies.
  
• Like I've said before, the Opera bug is no longer present:
  

  This doesn't work in Opera, which inserts the tags at the end of the post.

• The links in the Board Index and Message Index examples use the wrong class, but this is a very minor thing (what I mean: On the help page for my forum, the 'Board Name' and 'Topic Subject' links have underlines, but in the actual forum, they don't).
  
• This nice ordered list BBCode is not documented anywhere

Also, the registration agreement:

Also note that the software places a cookie, a text file containing bits of information (such as your username and password), in your browser's cache.

I'm quite sure that the user's password isn't stored in a cookie!

[codenaught]

Thanks for the feedback. It is greatly appreciated. I will take a look into this and will discuss this with the rest of the team.

This nice ordered list BBCode is not documented anywhere

I believe eldacar is planning to include this in his BBcode document when he continues to work on it.

I'm quite sure that the user's password isn't stored in a cookie!

Actually the sha1 encryption of the password is, but i suppose that certainly doesn't make that clear.

[Daniel15]

I believe eldacar is planning to include this in his BBcode document when he continues to work on it.

Yeah, he told me that

Actually the sha1 encryption of the password is, but i suppose that certainly doesn't make that clear.

Really? I didn't know that. I guess it should still be changed... It sounds quite scary when it says it stores your password in a cookie
Maybe change it to something saying that the password is stored in SHA1 hashed form, and cannot be retrieved from the hash? Or, remove that bit completely:

Also note that the software places a cookie, a text file containing bits of information (such as your username), in your browser's cache.

It sounds a lot better

[winrules]

Or the "such as" could be removed completly. Not that anyobody reads the registration agreements though

[motumbo]

I know that the encrypted password is stored in the database.  Is the encrypted password encrypted again when it is stored in the cookie? 

I need to find out if users are authenticated in SMF, but SSI.php keeps returning errors when I try to use it.  So I'm hoping that I can extract some info from the cookie and/or database session table and use that to determine whether or not the user is logged in to SMF.

[Daniel15]

motumbo, try turning on Use Subdomain independent cookies in Server Settings --> Feature Configuration, and see if that fixes your SSI problem (do not enable this if you're using a subdomain rather than a domain).