Websites upgraded+secured; help wanted

robn
Posts: 302
Joined: Mon Jul 01, 2013 1:11 am
Location: Melbourne, Australia

Websites upgraded+secured; help wanted

Post by robn »

You may have heard rumours that the wiki was hacked. Turns out it was true (I even got in trouble with the datacenter operators).

So, I've upgraded to the latest forum and wiki software (PHPBB and MediaWiki). For good measure, I've forced HTTPS for everything (existing links should redirect and continue to work).

There's a bunch of stuff that I know is now broken or at least a little off:
  • Homepage slideshow styling (probably a failing CSP rule on an embedded script)
  • Wiki mixed-content warnings (MediaWiki footer, probably some non-https images in pages too)
  • Wiki editor seems to be broken
  • http links need changing to https
  • Forum has lost its logo
As you see, I have very little time to maintaining Pioneer infrastructure these days. I would welcome help with fixing the above and, longer term, assistance running the web servers and build infrastructure (with a view to handing it off entirely to someone who wants it). There's no hurry from me; I'm happy to keep putting in my hour of Pioneer work each month, and will still respond when prodded. And I'll will get to all these things eventually!

-- Rob N.
bszlrd
Posts: 1084
Joined: Mon Jul 01, 2013 3:25 pm
Location: Budapest HU

Re: Websites upgraded+secured; help wanted

Post by bszlrd »

Thank you very much!

I'm afraid I can't offer much help regarding web maintenance, my knlowledge is quite limited in that field.
FluffyFreak
Posts: 1343
Joined: Tue Jul 02, 2013 1:49 pm
Location: Beeston, Nottinghamshire, GB
Contact:

Re: Websites upgraded+secured; help wanted

Post by FluffyFreak »

I've been meaning to reply but haven't known what to say!

Erm, thanks robn! :)

We'll have to get sorted with taking some of the shit off your hands somehow.
Ragerin
Posts: 4
Joined: Mon Mar 13, 2017 12:05 pm

Re: Websites upgraded+secured; help wanted

Post by Ragerin »

Hey

I hope I can contribute to Pioneer. :)

Grabbed some low-hanging fruit for now.

------
Mixed-content warning @ Wiki-footer:
The CreativeCommons logo image source should be 'https://i.creativecommons.org/l/by-sa/3.0/88x31.png'

---

Temporary workaround to the WYSIWYG editor issue:
  • Login to the Wiki
  • Go to preferences -> Editing
  • Scroll down to "Rich Editor" and check "Show WikiTextEditor"
  • Scroll all the way down and click "Save"
This fix allowed me to edit and preview without any problems, albeit with a pretty barebones editor...

I think I found the root cause for the issue at hand, but maybe we can discuss this sometime, @robn? Cheers

---


I am digging a bit into the other problems as well, catch me by PM or IRC and we could discuss these?
I may be able to help.
robn
Posts: 302
Joined: Mon Jul 01, 2013 1:11 am
Location: Melbourne, Australia

Re: Websites upgraded+secured; help wanted

Post by robn »

Ragerin dropped into IRC tonight and gave me some very precise instructions, and now the wysiwyg editor is running again and there's no mixed content warnings (and a couple of other minor tweaks). So Ragerin++, thank you!
Ragerin
Posts: 4
Joined: Mon Mar 13, 2017 12:05 pm

Re: Websites upgraded+secured; help wanted

Post by Ragerin »

As this is not relevant in regard to the development of Pioneer itself, I figured I'd just put this up here. :-)

I put up a new website design. You can give it a look at www.pioneer.hgaard.net


It's running on Django, so it's super easy to add functionality (ie. post-based news, authorization, etc.) if the need should arise.

Furthermore it has a translation system (not currently enabled) so the page can be viewed in different languages.
charlieg
Posts: 15
Joined: Thu Jul 23, 2015 11:22 am

Re: Websites upgraded+secured; help wanted

Post by charlieg »

Ragerin wrote: Thu Apr 06, 2017 8:32 amwww.pioneer.hgaard.net
That link didn't work, but this did: pioneer.hgaard.net
Ragerin
Posts: 4
Joined: Mon Mar 13, 2017 12:05 pm

Re: Websites upgraded+secured; help wanted

Post by Ragerin »

charlieg: yeah, I forgot a DNS record. I added it now, so www.pioneer.hgaard.net works too. Thanks for notifying me!
FluffyFreak
Posts: 1343
Joined: Tue Jul 02, 2013 1:49 pm
Location: Beeston, Nottinghamshire, GB
Contact:

Re: Websites upgraded+secured; help wanted

Post by FluffyFreak »

It's good, works fine and looks nice :)

Would it be possible to re-create the dynamic download link that we used to have?
I think it detected/guessed what OS you were using from the browser info and then changed the "download latest" button for the newest version for your OS.

Other than that I think it's all good :)
Ragerin
Posts: 4
Joined: Mon Mar 13, 2017 12:05 pm

Re: Websites upgraded+secured; help wanted

Post by Ragerin »

FluffyFreak: Yup, that wouldn't be super hard.

So, implementing a client OS detection in JS is really easy and fast.

But SourceForge does not have any API (that I could find).

So the solution I tested, involved grabbing the entire DOM of the download list for Pioneer on SourceForge and extracting the latest release. This solution could work as an independent script. I tried doing it clientside, but it is way too slow.

It's actually super strange, that SourceForge does not have an API... I was really surprised.


How do you currently do it? (robn?)
Post Reply