Advertisement:

Author Topic: Suit up!  (Read 36550 times)

Offline Dragooon

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 6,738
  • Gender: Male
  • I'm bIn
    • ShitizGarg on Facebook
    • Dragooon on GitHub
    • dragooon on LinkedIn
    • SMF-Media
Suit up!
« on: June 03, 2014, 11:00:17 AM »
Hello! Time for another update regarding our progress with 2.1.

Change in password hash
Passwords stored in the database are hashed. In the unlikely event that your database gets stolen and the passwords are leaked, the thief cannot see the actual password without cracking the hash. The hash protects the user's password being in plain sight to the attacker and helps protect their online identity on that site, as well as, potentially, other sites.

SMF has been using SHA-1 hash for its passwords from 1.1 to 2.0 and while SHA-1 still has no known weakness, it's a weak hash by today's standard and is susceptible to being cracked via brute force attacks. While this is still a hard task and would probably require GPU farms to be effective on a large scale, it's definitely a threat especially to passwords which are weak, commonly used and/or based on common dictionary words.

With 2.1 the entire hash has been switched to bcrypt. It's a far more secure and strong hash than SHA-1 and is a lot less susceptible to brute force attacks unlike SHA-1. Any forum upgrading from 2.0/1.1 will have their users' passwords upgraded to this hash once they login for the first time on the 2.1 forum and new users will automatically get the bcrypt password.

Likes and Mentions
SMF now has support for grabbing a user's attention simply by mentioning their name using the @username syntax, similar to popular social networking sites such as Facebook and Twitter. This action will send an alert and/or an e-mail depending upon the receiving user's preferences.

Likes also receive some additional features and improvements, with the ability to like a post via AJAX without having to refresh the page as well as permissions for membergroups to allow liking posts or not.

Minimum PHP version bump
With the additional improvements in password hashing as well as other improvements and advancements requiring the use of features such as closures, we've decided to bump the minimum version of PHP to 5.3.8 with 2.1.   SMF 2.1 will not work with versions below that.

Conversion of create_function's lambda style functions to true anonymous closures
SMF has a lot of create_function calls (over 200 in fact) and create_function is a particularly memory hungry function which cannot be optimised by bytecode caches and properly garbage collected. With the recent bump in PHP 5.3, we've decided to take this opportunity and convert all of them to true closures which will have much better support as well as proper support for garbage collection the moment it's out of scope.

BoardIndex optimisation
The BoardIndex receives some love with improvements in the way it's queried, breaking the previously monstrous query into three smaller queries. Also, boards are now explicitly sorted by using a sort cache for all the DB types instead of using a rather inefficient ORDER BY clause for Postgres, SQLite. This also fixes random board ordering in MySQL 5.6+ without impacting the performance.

Karma's gone!
As decided in a poll before, we've completely removed karma which will in turn be made into a separate optional modification for SMF 2.1.

But wait! We've even more!
  • Multiple improvements to the WIP Curve2 theme and its responsive aspect.
  • Linktree automatically hides parent boards if they cannot be seen by the visiting member.
  • jQuery has been updated to 1.11.
  • Multiple bugfixes regarding undefined indexes, unexpected behaviours etc.
  • And several other things I'm probably forgetting here...

That's it for now :), thank you for reading. With every commit, we're nearing a Beta release with the hopes to get one out as soon as possible. As always, all the latest changes, everything I've listed here and more can be seen on our GitHub repository but please be careful, as it's in Alpha stages for now. Feel free to give it a spin but do not use it in a live/production environment, there may be bugs or we may unexpectedly change something which might put your forum into an unusable state.

Regards

Offline Matthew K.

  • SMF Super Hero
  • *******
  • Posts: 12,430
  • Gender: Male
    • matthew.kerle on Facebook
    • @matthew_kerle on Twitter
Re: Suit up!
« Reply #1 on: June 03, 2014, 11:17:36 AM »
Upgrader and installer also now have RTL :P

kat

  • Guest
Re: Suit up!
« Reply #2 on: June 03, 2014, 11:18:06 AM »
Thanks for the update dragooooooooooooooooooooooooooooooooooooon! :)

Offline Dragooon

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 6,738
  • Gender: Male
  • I'm bIn
    • ShitizGarg on Facebook
    • Dragooon on GitHub
    • dragooon on LinkedIn
    • SMF-Media
Re: Suit up!
« Reply #3 on: June 03, 2014, 11:35:05 AM »
Upgrader and installer also now have RTL :P
Well I was bound to miss a few :P, one can always check Github's commit logs to know exactly what went down.

Offline radu81

  • Jr. Member
  • **
  • Posts: 315
  • Gender: Male
Re: Suit up!
« Reply #4 on: June 03, 2014, 12:16:31 PM »
great news, thanks for the updates!
sorry for my bad english

Offline CountryLady

  • Jr. Member
  • **
  • Posts: 178
  • Gender: Female
    • OurCountryHaven
Re: Suit up!
« Reply #5 on: June 03, 2014, 01:41:19 PM »

Fantastic News~! Many "Thanks" to ALL involved. This is really exciting.

Those with the know-how 8) to do this, please keep up this awesome work.

Thanks for posting this Dragooon. :D

Offline CoreISP

  • Server Admin
  • Server Team
  • SMF Super Hero
  • *
  • Posts: 16,990
  • Gender: Male
  • CoreISP.net
    • liroyvh on LinkedIn
    • @liroyvh on Twitter
    • CoreISP Corporation :: WebHosting, Dedicated Servers, and more!
Re: Suit up!
« Reply #6 on: June 03, 2014, 05:54:30 PM »
Good job :)
- CoreISP.net Corporation -
  WebHosting, Colocation, Domain Registration & Network Services
- DedicatedBox.us Servers -
  Low priced Servers in a high-quality Network, the place for all your (advanced) server needs.
  We specialize in hosting big boards. Contact us!

((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

Offline vbgamer45

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 19,361
    • smfhacks on Facebook
    • VBGAMER45 on GitHub
    • @createaforum on Twitter
    • SMF For Free
Re: Suit up!
« Reply #7 on: June 03, 2014, 06:02:23 PM »
Thanks for the update! I really enjoy the mentions system and use it on my boards.
Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

Offline Antechinus

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 24,136
  • Master of BBC Abuse
Re: Suit up!
« Reply #8 on: June 03, 2014, 06:08:53 PM »
Nice work. Question: is it possible for a user to completely switch off the likes and mentions notifications?* I know some people like them, but others just find them a nuisance.

*Meaning so they never show up on the forum interface at all.

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 68,055
    • Arantor on GitHub
Re: Suit up!
« Reply #9 on: June 03, 2014, 06:10:07 PM »
I believe likes can be turned off, not so sure about mentions. Given that they tie into the alerts system and a bunch of other stuff also ties into the alerts system...
To assume is to hope that those who came before had the presence of mind and capacity to implement the dreams of those who would come after.

You either die a hero or live long enough to see yourself become the villain. It seems you have chosen which, and now I must do the same.

Offline Antechinus

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 24,136
  • Master of BBC Abuse
Re: Suit up!
« Reply #10 on: June 03, 2014, 06:17:39 PM »
K. Well my 2c is that it'd be cool to have a user option to mindlessly clear all mentions with one click. I find it a PITA when I have to manually go through and deal with each one.

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 68,055
    • Arantor on GitHub
Re: Suit up!
« Reply #11 on: June 03, 2014, 06:18:27 PM »
You should be able to turn off getting alerts for mentions if you don't care :P
To assume is to hope that those who came before had the presence of mind and capacity to implement the dreams of those who would come after.

You either die a hero or live long enough to see yourself become the villain. It seems you have chosen which, and now I must do the same.

Offline Antechinus

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 24,136
  • Master of BBC Abuse
Re: Suit up!
« Reply #12 on: June 03, 2014, 06:20:18 PM »
Oh goody. Elk didn't have that last I checked. :D

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 68,055
    • Arantor on GitHub
Re: Suit up!
« Reply #13 on: June 03, 2014, 06:21:04 PM »
That's because Elk's system is totally different from SMF's.
To assume is to hope that those who came before had the presence of mind and capacity to implement the dreams of those who would come after.

You either die a hero or live long enough to see yourself become the villain. It seems you have chosen which, and now I must do the same.

Offline Antechinus

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 24,136
  • Master of BBC Abuse
Re: Suit up!
« Reply #14 on: June 03, 2014, 06:23:39 PM »
Well since they're determined to be better, I expect they'll have to put it on their to-do list now.

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 68,055
    • Arantor on GitHub
Re: Suit up!
« Reply #15 on: June 03, 2014, 06:25:22 PM »
Yeah, I chose to stop development before I finished building it. Long story. Dragooon is doing awesome work now though.
To assume is to hope that those who came before had the presence of mind and capacity to implement the dreams of those who would come after.

You either die a hero or live long enough to see yourself become the villain. It seems you have chosen which, and now I must do the same.

Offline NanoSector

  • Customizer
  • SMF Super Hero
  • *
  • Posts: 10,471
  • Gender: Male
  • VC321xb47@aperture:~#
    • Yoshi2889 on GitHub
Re: Suit up!
« Reply #16 on: June 04, 2014, 01:52:57 AM »
You should be able to turn off getting alerts for mentions if you don't care :P
Wouldn't that kind of defeat the entire point? :P

Nice work, thanks for the update.
My Mods / Mod Builder - A tool to easily create mods / Blog
"I've heard from a reliable source that the Answer is 42. But, still no word on what the question is."

Offline Antechinus

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 24,136
  • Master of BBC Abuse
Re: Suit up!
« Reply #17 on: June 04, 2014, 02:19:12 AM »
Yeah, I want it to defeat the whole point. :D

Online Antes

  • Evil Black Cat
  • SMF Friend
  • SMF Hero
  • *
  • Posts: 8,649
  • Gender: Male
  • Black cat rulz!
    • Antes on GitHub
    • merta on LinkedIn
    • @antesistan on Twitter
    • Lunarfall
Re: Suit up!
« Reply #18 on: June 04, 2014, 02:29:40 AM »
Thanks for the update! :)
Active Project(s): [ SimpleDesk ] # [ Lunarfall ] # [ CoreStore ]

Past Project(s): [ ezPortal ]

Offline 4Kstore

  • SMF Hero
  • ******
  • Posts: 4,298
  • Gender: Male
    • agustintari on Facebook
    • @agustintarifa on Twitter
    • SSIMPLE TEAM PAGE
Re: Suit up!
« Reply #19 on: June 04, 2014, 02:54:55 AM »
Nice update! thanks for all
¡¡NEW MOD: Sparkles User Names!!!

Offline Dragooon

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 6,738
  • Gender: Male
  • I'm bIn
    • ShitizGarg on Facebook
    • Dragooon on GitHub
    • dragooon on LinkedIn
    • SMF-Media
Re: Suit up!
« Reply #20 on: June 04, 2014, 03:55:46 AM »
Nice work. Question: is it possible for a user to completely switch off the likes and mentions notifications?* I know some people like them, but others just find them a nuisance.

*Meaning so they never show up on the forum interface at all.
The alerts for both Likes and Mentions can be disabled, but the user will still see the mentions/likes on individual posts.

Offline Antechinus

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 24,136
  • Master of BBC Abuse
Re: Suit up!
« Reply #21 on: June 04, 2014, 04:02:15 AM »
Cool. That'll work. :)

Offline Xarkurai

  • Jr. Member
  • **
  • Posts: 208
Re: Suit up!
« Reply #22 on: June 04, 2014, 07:00:02 AM »
Very interesting, thanks for letting us know!

I have a question about the karma since I didn't followed it up.
Since it becomes a mod, will there be a replacement system and will the karma mod be maintained by SMF itself?
Useful paid mod: Badge Awards - Award members for actions

Offline Dragooon

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 6,738
  • Gender: Male
  • I'm bIn
    • ShitizGarg on Facebook
    • Dragooon on GitHub
    • dragooon on LinkedIn
    • SMF-Media
Re: Suit up!
« Reply #23 on: June 04, 2014, 07:02:35 AM »
Quote
Since it becomes a mod, will there be a replacement system and will the karma mod be maintained by SMF itself?
Likes is intended to be the replacement system, and the mod will be released by SMF which will be exactly as the old system but I don't know about the plans of maintaining it (probably nothing beyond the occasional bug fix if any)

Offline radu81

  • Jr. Member
  • **
  • Posts: 315
  • Gender: Male
Re: Suit up!
« Reply #24 on: June 04, 2014, 08:22:21 AM »
Likes is intended to be the replacement system, and the mod will be released by SMF which will be exactly as the old system but I don't know about the plans of maintaining it (probably nothing beyond the occasional bug fix if any)
Good choice  8)
sorry for my bad english

Offline Irisado

  • Doc Coordinator
  • SMF Hero
  • *
  • Posts: 9,013
  • Soñando debajo del arco iris
Re: Suit up!
« Reply #25 on: June 04, 2014, 08:36:24 AM »
Thanks for the update.  Great work everyone :).
Soñando con una playa donde brilla el sol, un arco iris ilumina el cielo, y el mar espejea iridescentemente

Offline ziycon

  • Support Specialist
  • SMF Hero
  • *
  • Posts: 2,667
  • Gender: Male
Re: Suit up!
« Reply #26 on: June 04, 2014, 10:39:11 AM »
Great work all.

Offline Xarkurai

  • Jr. Member
  • **
  • Posts: 208
Re: Suit up!
« Reply #27 on: June 04, 2014, 06:45:13 PM »
Quote
Since it becomes a mod, will there be a replacement system and will the karma mod be maintained by SMF itself?
Likes is intended to be the replacement system, and the mod will be released by SMF which will be exactly as the old system but I don't know about the plans of maintaining it (probably nothing beyond the occasional bug fix if any)

Ah, that's cool :).
Another annoying question: any idea's known about converting karma to likes, in that case? (for example positive karma becomes the current amount of positive likes and negative karma becomes the current amount of dislikes)

Cheers :).
Useful paid mod: Badge Awards - Award members for actions

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 68,055
    • Arantor on GitHub
Re: Suit up!
« Reply #28 on: June 04, 2014, 06:46:15 PM »
Isn't possible because karma is only recorded per user, not per post. (It is recorded per post for *short* periods of time, like the last hour by default)
To assume is to hope that those who came before had the presence of mind and capacity to implement the dreams of those who would come after.

You either die a hero or live long enough to see yourself become the villain. It seems you have chosen which, and now I must do the same.

Offline Xarkurai

  • Jr. Member
  • **
  • Posts: 208
Re: Suit up!
« Reply #29 on: June 05, 2014, 06:35:20 AM »
Cool, okay thanks.
I was planning on modifying the karma system but since it's going to disappear I'm not sure to still do it.
Useful paid mod: Badge Awards - Award members for actions

Offline Chen Zhen

  • Sophist Member
  • *****
  • Posts: 1,028
  • Gender: Male
  • If you're going through hell, keep going!
    • Underdog-01 on GitHub
    • WebDev.ca
Re: Suit up!
« Reply #30 on: June 05, 2014, 11:37:10 PM »
Quote
Conversion of create_function's lambda style functions to true anonymous closures
SMF has a lot of create_function calls (over 200 in fact) and create_function is a particularly memory hungry function which cannot be optimised by bytecode caches and properly garbage collected. With the recent bump in PHP 5.3, we've decided to take this opportunity and convert all of them to true closures which will have much better support as well as proper support for garbage collection the moment it's out of scope.

  This is a good decision and I am glad to see the team decided to go though with that minimal requirement and to do away with those create_functions. Imo it was rather obvious to what was causing those issues as the official PHP documentation clearly states the repercussion of using those in multiple and compounding at that.
 

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 68,055
    • Arantor on GitHub
Re: Suit up!
« Reply #31 on: June 05, 2014, 11:44:35 PM »
All of the code related to PHP 5.5 compatibility for 2.0.7 was drawn from 2.1, most of which was written in 2012 by people who've long since left the team. If it was that obvious, would it not have been noticed sooner?
To assume is to hope that those who came before had the presence of mind and capacity to implement the dreams of those who would come after.

You either die a hero or live long enough to see yourself become the villain. It seems you have chosen which, and now I must do the same.

Offline Alpay

  • Language Moderator
  • SMF Hero
  • *
  • Posts: 3,594
  • Gender: Male
  • test
    • Personal Web Page
Re: Suit up!
« Reply #32 on: June 06, 2014, 09:33:05 AM »
Good Job ^^

Offline karlbenson

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 15,629
  • Gender: Male
    • @mortonssols on Twitter
    • Criminal Solicitors
Re: Suit up!
« Reply #33 on: August 25, 2014, 06:40:46 AM »
Really looking forward to 2.1 and reading about it.

Offline Masterd

  • SMF Hero
  • ******
  • Posts: 3,887
  • Gender: Male
  • Sapienti satis.
Re: Suit up!
« Reply #34 on: August 31, 2014, 03:04:12 PM »
Really looking forward to 2.1 and reading about it.

Yeah, it looks like it's going to be really good. We're finally getting some long wanted improvements.
My Mods

Sugested that too. Hey ho. I'd link you to the original discussion but it's not visible to most people (seekrit team board stuff that is more dangerous than wikileaks).


Don't PM me for support! Use the appropriate support board!

Offline gorbi

  • Semi-Newbie
  • *
  • Posts: 90
    • https://www.facebook.com/s.gorbachevsky on Facebook
    • @gorbachevsky on Twitter
Re: Suit up!
« Reply #35 on: September 24, 2014, 10:43:25 AM »
Hello! When wait 2.0.9?

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 68,055
    • Arantor on GitHub
Re: Suit up!
« Reply #36 on: September 24, 2014, 10:46:48 AM »
When it is ready. The team are reviewing it and testing it and then it will be released once the team are satisfied with it.
To assume is to hope that those who came before had the presence of mind and capacity to implement the dreams of those who would come after.

You either die a hero or live long enough to see yourself become the villain. It seems you have chosen which, and now I must do the same.

Offline live627

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 5,265
  • Gender: Male
  • Cat: Destroy!
    • live627 on Facebook
    • live627 on GitHub
    • live627 on LinkedIn
    • @live627 on Twitter
    • livemods
Re: Suit up!
« Reply #37 on: September 24, 2014, 11:04:32 AM »


couldn't resist...
Try not to become a man of success, but rather try to become a man of value.
- Albert Einstein

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 68,055
    • Arantor on GitHub
Re: Suit up!
« Reply #38 on: September 24, 2014, 11:06:40 AM »
Who let Antes in to the kitchen? ;D
To assume is to hope that those who came before had the presence of mind and capacity to implement the dreams of those who would come after.

You either die a hero or live long enough to see yourself become the villain. It seems you have chosen which, and now I must do the same.

Offline live627

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 5,265
  • Gender: Male
  • Cat: Destroy!
    • live627 on Facebook
    • live627 on GitHub
    • live627 on LinkedIn
    • @live627 on Twitter
    • livemods
Re: Suit up!
« Reply #39 on: September 24, 2014, 11:10:53 AM »
My evil non-existent half brother. :D
Try not to become a man of success, but rather try to become a man of value.
- Albert Einstein

Online Antes

  • Evil Black Cat
  • SMF Friend
  • SMF Hero
  • *
  • Posts: 8,649
  • Gender: Male
  • Black cat rulz!
    • Antes on GitHub
    • merta on LinkedIn
    • @antesistan on Twitter
    • Lunarfall
Re: Suit up!
« Reply #40 on: September 24, 2014, 11:12:38 AM »
Who let Antes in to the kitchen? ;D

Check the rear door, do you think that's only for dogs :D :D
Active Project(s): [ SimpleDesk ] # [ Lunarfall ] # [ CoreStore ]

Past Project(s): [ ezPortal ]

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 68,055
    • Arantor on GitHub
Re: Suit up!
« Reply #41 on: September 24, 2014, 11:13:45 AM »
And you would come in via the dog's door? For shame.
To assume is to hope that those who came before had the presence of mind and capacity to implement the dreams of those who would come after.

You either die a hero or live long enough to see yourself become the villain. It seems you have chosen which, and now I must do the same.

Online Antes

  • Evil Black Cat
  • SMF Friend
  • SMF Hero
  • *
  • Posts: 8,649
  • Gender: Male
  • Black cat rulz!
    • Antes on GitHub
    • merta on LinkedIn
    • @antesistan on Twitter
    • Lunarfall
Re: Suit up!
« Reply #42 on: September 24, 2014, 11:19:22 AM »
And you would come in via the dog's door? For shame.

For emergency only... Mailman and things inside mailbox taking my whole time mostly... I sleep rest
Active Project(s): [ SimpleDesk ] # [ Lunarfall ] # [ CoreStore ]

Past Project(s): [ ezPortal ]