Development Discussion Board

That is not the point, but you are right Our goal should be to provide users with the most useful and easiest to use tool to achieve their goal.

Karma systems tend to get complex, having to deal with potential spammers and trolls.

Therefore I propose something I call 'Thank-You-System' - while it still can stand as a Karma-System.

Every user but mods and admins can click on a button next to a post. Doing so they say tahnk you to the author ...

@DeadEye686: Of course, with a security hole in the implementation the suggestion would be worth nothing. But I don't agree this would be security by obscurity. It would add security. And such things work, as Secret Tags do work, for the same reason. When you want to build a botnet or simply show ...

Over the past month, the highlight function has been a source of trouble that needed fixing time and again. Yesterday is struck my mind who it could be secured.

The highlight function is meant to be used after a search was conducted to highlight the search term in the message texts. But the ...

Aynone read http://www.usemod.com/cgi-bin/mb.pl?KuroshinMojo" target="_blank

even a php file would be breakable. The only response IMHO is to not store at all the ftp pass, and ask it at the easymod session start.
If the file layed in a directory outside the webserver's document... And even if it is: as I said, the database is much more exposed than FTP is, so FTP aka a ...

Whoops, must have missed that feature

Of course it is nearly to impossible to design this karma thingy in a way everybody agrees with it. Too different are the requirements for the thousands of phpBB installations/communities running on phpBB.

Because of that I wonder why this feature has made it into 2.1/2.2. I think it is too ...

Actually I don't quite get at all why you store the FTP credentials in the database.

To me this sounds like a mayor security issue: if the database is compromized, the files are, too. Given the fact that the password is encrypted in some way, it may take an attacker a bit longer to actually do sth ...

FYI:

http://jra.nu/Jan-Soft/phpbb-wap.htm" target="_blank

http://pda.bokt.nl/forums/" target="_blank