Alicornutopia

I would agree, but there are features that are useful for just reading. Maybe an invitation system for letting people post would be good, though, at least for now.

I'm going to turn caching back on, with better expiration, with a shit ton of expiration tests, just for logged out users. If you read the site in logged out mode, please let me know if anything looks janky.

Invites aren't a bad idea, though at the size we're at, sharing the secret key is probably just as efficient. And yes, it does cause me worry about hacking (I actually saw someone try to do sql injection with the page variable recently; it did technically crash things, but that's because my escaping happened to convert it to -22 and you can't fetch negative pages, it didn't do anything unsafe to the database.) The thing I do definitely need to do before I open the site up more is fix the overly-secure-to-the-point-of-brokeness password system, though.

I needed you to help reset my password only because I didn’t have an email address set; since that’s now required, what’s wrong with it?

Edit: Is this related to the thing about not being able to change your username?

Two icon-related requests:

(A) The "add existing icon to gallery" page is always a mess for me (http://imgur.com/a/Q1Uvq) because it shows all of my existing icons at the actual file size, which in my case is lots of different random square sizes (since I often crop an image to be square and then use it as an icon without resizing the file). It's a mess visually, and scrolls way off the screen to the right; the page is nearly unusable for me. Would it be hard to set the existing icons to just display at 100 x 100 size, like everywhere else?

(B) When I'm viewing a gallery, could I have a "select all icons" checkbox? Sometimes I want to remove all but a few icons from a gallery, or take all of the [unassigned] icons and put them in a single gallery, and it's a pain to click each of the little boxes individually every time


[hugs Marri, who is putting in ridiculous amounts of work on this project and is worthy of all praise and thanksgiving (&c, &c)]

The issue I'm having is needing to mess about with the secret in order to set a new reader up with the Unread feature. A different workable approach would be an option to do Unread with local storage rather than a login.

@DanielH This is totally the thing about having your password salted with your username, yep. I'll be generating an actual salt per user instead of using their username. And then probably wrapping a filter that says "please set your email address and confirm your password to continue using the site" so I don't have to worry about this in the future.

@Moriwen <3333333 I will To Do them

@Ezra do you want to be able to whitelist their email address or send them an email with an invite link or what? I think I'm just still not getting what you're looking for that's less work then straight up telling them the secret. Unless you forgot the secret? xD

When I am chatting with a friend, I can tell them "you can track unread replies to threads if you register on glowfic.com!" But it's not very helpful for me to tell them "and you'll need some sort of secret password to register, um, I think it's something like 'THE COIN' in all caps?"

It's on the top of the very first post in this thread.

EDIT: For convenience, it is ALLHAILTHECOIN.

Marri, I assume this was intentional on your part, but I was logged out without deliberately doing that. I got a message on the site saying I had been. I could log back in just fine.

If this was not intentional, could you investigate? If it will happen in the future, could you improve the message to say why the logout happened?

Noooo, that one wasn't me. Er, the only time you should see a message that you are logged out (or be logged out by the code) is when you push the Logout button or in some way follow the Logout path. You can also log out if e.g. you don't choose Remember Me and restart your browser, but the code itself almost never logs you out, cause, why would I do that.

That said, if you are seeing a "you must be logged in to see this page" message rather than the "You have been logged out." message, that's a different thing? Which did you see?