It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
avatar
USERNAME:kohlrak#Q&_^Q&Q#GROUP:4#Q&_^Q&Q#LINK:329#Q&_^Q&Q#Oh, it's client-side. Not going to solve the bots. It needs to be the server-side code that changes.#Q&_^Q&Q#LINK:329#Q&_^Q&Q#
avatar
No, i didn't need to. Going back and reading doesn't change anything. The call to the ajax can be forged, even if the javascript is removed. The HTTP request to the ajax has to be rejected by the ajax, which is indeed what you say. The question is, what's the handler file, and what all is in the file? Does it only handle votes, or does it pretty much handle all the ajax on the site, including the notification bar at the top? Is there code in the forumAjax that does not belong in the forum Ajax that other things are tied to?

I'm sure there's a firefox addon somewhere that we could use to test this, though. To be fair, it does look suspiciously easy to at least isolate and comment out. Still, that doesn't leave the "report spam" button functional. Downvote must occur to even see that.
avatar
avatar
kohlrak: No, i didn't need to. Going back and reading doesn't change anything. The call to the ajax can be forged, even if the javascript is removed. The HTTP request to the ajax has to be rejected by the ajax, which is indeed what you say. The question is, what's the handler file, and what all is in the file? Does it only handle votes, or does it pretty much handle all the ajax on the site, including the notification bar at the top? Is there code in the forumAjax that does not belong in the forum Ajax that other things are tied to?

I'm sure there's a firefox addon somewhere that we could use to test this, though. To be fair, it does look suspiciously easy to at least isolate and comment out. Still, that doesn't leave the "report spam" button functional. Downvote must occur to even see that.
Yep. It's not too difficult to disable on the front end and can most certainly be disabled on the back end.

I am not masochistic enough to keep digging through this. The point is, it needs to be fixed and/or replaced with a good open source solution. Hopefully using a modern framework, as opposed to the horrible AngularJS that they are using right now. This one, for instance, might warrant a closer look: https://github.com/shoumma/ReForum
avatar
Linko90: I am here and still taking notes!
Welcome. :) I'll just confirm that (and I know this isn't your department) imo GOG should try to do more to ensure patches arrive in a timely manner.

The forum itself could certainly use an update, but from a business angle it's not too bad imo, gets the job done.
low rated
avatar
avatar
richlind33: I'm just trying to balance things out a little. I actually feel for him because I've had to deal with a serious anger issue.

It's all good. ;p
You are a bit strange,you attack then try to soften the blow with a lame apology.What's that you don't understand?Check your posts to me and Alaric and ''go figure''.
Post edited June 08, 2018 by Tauto
avatar
richlind33: I'm just trying to balance things out a little. I actually feel for him because I've had to deal with a serious anger issue.

It's all good. ;p
avatar
Tauto: You are a bit strange,you attack then try to soften the blow with a lame apology.What's that you don't understand?Check your posts to me and Alaric and ''go figure''.
Jerkmuter is your friend, bro. o.O
avatar
richlind33: I'm just trying to balance things out a little. I actually feel for him because I've had to deal with a serious anger issue.

It's all good. ;p
avatar
Tauto: You are a bit strange,you attack then try to soften the blow with a lame apology.What's that you don't understand?Check your posts to me and Alaric and ''go figure''.
Are you the new GameRager?
low rated
avatar
Tauto: You are a bit strange,you attack then try to soften the blow with a lame apology.What's that you don't understand?Check your posts to me and Alaric and ''go figure''.
avatar
PoppyAppletree: Are you the new GameRager?
??????????? Way over my head.
avatar
PoppyAppletree: Are you the new GameRager?
avatar
Tauto: ??????????? Way over my head.
He was the 2010/2011 troll of the year.
low rated
avatar
Tauto: ??????????? Way over my head.
avatar
PoppyAppletree: He was the 2010/2011 troll of the year.
Okay.It's a bit like ''fake news'' verses the truth in here.You figure out which one I am at your leisure,if so inclined but I wouldn't really bother.
avatar
kohlrak: Assembly programers, machine code programmers. Web isn't even my forte. To be fair, half the forum websites i've seen suffer from this bug, and it's an easy fix, but it's a matter of deleting a certain line, which is hard to find. Worst part is, the reason the bug happened is because the code happens twice when it only needs to happen once. Highlight the code to see what is happening. Basically, the "special characters" are run through a conversion function to make them "safe" to prevent hacking. So your special characters like Ö are being converted to make sure no one tries to take advantage of them to break the HTML and inject their own HTML in, which would allow people to mess with the site's code. What its' supposed to do is turn things like ❤ into &heart;. The problem is, to prevent issues when teaching people how to do that in HTML, there also needs to be a way of turning & into something. So if you highlight, then "view source selection" you'll see it becomes "&oumlaut;" which is wrong. Specifically, since they're already sanitizing the input (or the output), it makes sense to go back into the bbcode checking area and remove the protection from links.
This really make sense since this bug started to occur shortly after GOG got attacked by spammers and they tried to prevent this by impementing some more or less useful protections (there was a time when you could not even enter 91 or sth. afair and people were wondering why their posts did not work).
avatar
kohlrak: Assembly programers, machine code programmers. Web isn't even my forte. To be fair, half the forum websites i've seen suffer from this bug, and it's an easy fix, but it's a matter of deleting a certain line, which is hard to find. Worst part is, the reason the bug happened is because the code happens twice when it only needs to happen once. Highlight the code to see what is happening. Basically, the "special characters" are run through a conversion function to make them "safe" to prevent hacking. So your special characters like Ö are being converted to make sure no one tries to take advantage of them to break the HTML and inject their own HTML in, which would allow people to mess with the site's code. What its' supposed to do is turn things like ❤ into &heart;. The problem is, to prevent issues when teaching people how to do that in HTML, there also needs to be a way of turning & into something. So if you highlight, then "view source selection" you'll see it becomes "&oumlaut;" which is wrong. Specifically, since they're already sanitizing the input (or the output), it makes sense to go back into the bbcode checking area and remove the protection from links.
avatar
MarkoH01: This really make sense since this bug started to occur shortly after GOG got attacked by spammers and they tried to prevent this by impementing some more or less useful protections (there was a time when you could not even enter 91 or sth. afair and people were wondering why their posts did not work).
Yeah. Usually, when you notice this, you fix it. This is a dead giveaway for the forum internals, though, as well as how ugly the code really is. There's probably like 100 lines for every comment line, which is bad mojo.
One thing that needs to be added to the reputation discussion is perspective...

I'm not sure how quick you have been brought up to speed, but apparently there is a cap where one can only gain or lose 5 rep a day. But if one makes a post they gain one. What this means for a regular poster is that the loss is at most 4 points per day.

I used to have 1000 rep and 4 stars. Apparently some people took umbrage to that and started hitting me every day until I dropped down to about 700. That stopped for awhile and I got back to 1000 until the past downswing. If you see my rep now, you'll notice that's almost a 1200 point loss. That takes almost a full year if one is never upvoted either. The truth is, I have been having my reputation attacked for at least 2 straight years because a lot of people appreciate my spreadsheet giving details on the sales of the games on this site which has countered some of the loss.

Think about what that says about Tauto? Not outright defending him, because he has a history of causing trouble, but that is no excuse for every post of his to be constantly downvoted regardless of content. Just look at this thread and how some people's posts have been low-rated despite presenting a reasonable opinion. They are attacked because of who they are, not the posts they make. This is what I mean by the bullying and harassment of people on this forum.

Some of these self-appointed "do-gooders" have taken it upon themselves to name call, downvote and harass other users off the forum (presumably to "make GoG better") when all they are really doing is adding to the strife. They bad mouth people until they make an angry response and then try to report them for it.

Notice how Breja, SirPrimalform, and Fairfox seem to think it's okay to insultingly accuse people of "whining" about rep, and when I told Fairfox to "go get hit by a bus" or Breja to "Go die in a fire", I'm accused of "issuing death threats" as these vain people try to find every made up and ridiculous excuse to remove their "enemies" from the forum. They've done the same for years, calling people "whiners" or "trolls" or all kinds of other names and when someone finally has had enough and tells them to eff off, they try to report them for their language.

Fables claimed she was going to look into the issue, but she didn't.

These people are causing as much problem on these forums as Tauto. All the personal attacks from every side need to stop. People need to quit downvoting others over complaining about their rep. They need to quit the personal attacks and harassment. They need to quit downvoting every post by particular individuals regardless of content. I'm sick and tired of being told I should "take a break" from the forum because I'm "too angry". Why shouldn't I be angry when these jerks constantly attack and harass you day after day for years?

What needs to change is downvoting and negative reputation needs to be removed. That's a start. It takes away one of the weapons these bullies are using. And then those who join a discussion with the sole intent of insulting another need to start getting warnings. It's one thing when a topic flares up as two sides disagree, but nowadays, certain individuals go into discussions just to make it go down in flames. They never once address the topic, just attack certain people in it. Calling them "Nazis" while never once addressing the actual topic of discussion. Exactly as in the deleted thread where the mere mention that I ended up voting for Donald Trump was responded to with the claim that makes me a "sexist, racist, alt-right Nazi" just for voting for him. It can't possibly be that I thought Hillary Clinton was dangerous in her talk about "doing more about Russia and the Middle East" which sounded like she wanted to go to war again (which I feel is a waste of our tax dollars which could be better spent on reducing the deficit or other services), or that I thought focusing more attention on our trade deficit and bringing jobs back to the U.S.) offsets the things I did not like about Trump. To some people they try to claim the only reason people voted for Trump is racism or sexism. Apparently they can't understand the concept of voting for the person one thinks might do the better job. I thought both of them were terrible candidates. Watching those debates was painful, but those were our choices after the primary...

The point being, I shouldn't be attacked for a reasonable opinion, nor threatened or bullied off the forum by other forum users for expressing it. The rep attacks and outright hostility to other users needs to stop.
Post edited June 09, 2018 by RWarehall
I went from 1200 to -30.
If you think you're alone here think again.

Get over it.
Post edited June 09, 2018 by tinyE
avatar
tinyE: I went from 1200 to -30.

Get over it.
That makes it okay right? Just keep telling me it isn't a problem. Like I said, bullying and harassment. People shouldn't have to "get over it", it should be FIXED!

To tell someone "to get over it" is demeaning. To downvote and otherwise criticize people for bringing up a problem is dumb. I can imagine someone telling his wife just to "get over it", I'm sure that would go over well...
Post edited June 09, 2018 by RWarehall
avatar
tinyE: I went from 1200 to -30.

Get over it.
avatar
RWarehall: That makes it okay right? Just keep telling me it isn't a problem. Like I said, bullying and harassment. People shouldn't have to "get over it", it should be FIXED!

To tell someone "to get over it" is demeaning. To downvote and otherwise criticize people for bringing up a problem is dumb. I can imagine someone telling his wife just to "get over it", I'm sure that would go over well...
Well of course it needs to be fixed, but do you think coming in here every day and bitching about it going to help? Trust me, I've been there. When I took that huge drop I was in here every day moaning about it, but the only thing I accomplished was getting people to rejoice in my rep drop. I became so annoying to everyone even my friends started derepping me.

Safe to say you might be suffering the same thing.