Development Discussion Board

Well, the basic idea behind pass phrases are that they're just as hard to crack via brute force, but much easier to remember for people. Remembering "$php33foru*mp@a$$" is much harder than " phpbb forum awesome blossom ". But, as long as the passphrase role allows it, you can en...

I think, from a user perspective, it should be clear where each word goes, what sections is which, etc. From a users perspective (mine, not yours ;) ), it makes it more complicated - all UIs i know tell me to enter my username (one entry-field) and a self-choosen passphrase (another entry-field) an...

kjtocool wrote:I'd like to see phpbb support both implementations

it is no separate implementation, Its just another password (better name would be passphrase) rule including a whitespace as allowed character ...

What do you mean? Banning by IP is currently build in - and a "guest" is every user not logged in.

Disapproving is logged, but currently you can never find the original post (or even the topic, if it is the first post in the topic ) because the post and also the topic (only on first post) will be hard deleted from the database. In the moderators log, you can give a reason for disapproval, and you...

"Who" and "why" can be placed in the log like similar actions

Maybe the "softdelete" feature for posts can be used for this, so the posts stay in the database, but invisible to the public.
For that, a "softdeleted" value on topic-table (topic_approved = -1) in addition to the discussed value in posts-table can be used for dis-approved topics

IP addresses change very often, and what if someone is connected to a network (workplace/internet-cafe)? OK, your talking about a human spammer, i thought about spam-bots who are very often using the same IP for a longer period. So also add a changing captcha they have to fill in, and a lot requier...

naim wrote: so what if a spammer starts sending requests to the contact sheet?!

Maybe a method can be implemented to block sending a second request for a time (eg. 1 day - set in config-table) after sending a request, depending on the IP-Adress for guest or userid (for registered users).

What about New template variables Use much less css instead duplicated code for different languages :roll: the only thing that is duplicated for different languages are the language strings themselves :? Maybe not - some languages are very similar, so you can think about "inherited" langu...