Comments by benr
When logged in, the last menu dropdown should be your name, and under that there should be a link to your unreviewed submissions. But I have now unhidden your 7x7 WoO page.
I was assuming the worst about possible malicious code; a bit of searching hasn't come up with anything that I am too worried about at this site. (As for editor review, I was worried about modifications to an existing page, which doesn't require an editor's sign-off; or sufficiently subtle scripts that wouldn't be noticed without examining the source.)
I did a little looking for a text entry system and right now I like CKEditor.
Evidently the problem with special characters is an issue with textarea elements in general. From what I can tell, the best solution is to escape all such characters when pulling the information from the database to populate the textareas; then the textarea (for whatever reason) will collapse all of that escaping back into what actually lives inside the database.
Probably need to revisit escaping of characters (or better yet, prepared statements) for apostrophes. I am not sure why the new server would cause the problem. Also, you have reverted some changes I made over the last few months. Most noticeably in the menu and the function that displays comments. I will keep an eye out for others. There is at least one recent game submission, "2 Pronged Chess", that has disappeared (along with a comment on it). I like the Whats New combined with the homepage. Its layout needs a little work for small screens (not just mobile). Perhaps it is just me, but I spend about half my time here on the Comments page, so I would like to see a more prominent link to it (maybe giving it a more alluring name too, "Talk" or "Discuss" or something).
The logout script seems to log me out in that I cannot edit my comments or member submissions, but the menu with my name still shows up, and at the login page it thinks I am logged in so I cannot actually log in. *EDIT: inserting this new comment has logged me in.* The list of my unreviewed submissions (/index/yournew.php) is not being populated for me, and I get a 505 error inside the Editor folder. Apostrophes also cause problems in user submissions.
I will try tonight. Is it possible/reasonable to stop forwarding to the new host, work out kinks with the scripts there, and when things seem to be working transfer over the latest database? That way people can continue using the old host while we work on things and the data entered during that time can be transferred? (The only problem that comes to mind [but again I am not as tech-savvy as others] is if David wants to kill the old host soon.)
An email from Joe Joyce (apostrophes removed): "Ive tried several times yesterday and today to post comments on the site, but am unable to. Kindly tell Fergus I am still interested, that I do occasionally act as editor, and I still get requests from people Ive helped in the past."
test ' and " and / on game page comment also, < and > and &
Just modified the script to escape inside the subject name. I also did the escaping to fix a problem with member game submission scripts; do any itemid's have apostrophes? If not, I would prefer to disallow that rather than escape them.
Ed's applets still work on my machines (with a couple of warning messages to click through).
I want to grab the last database entries from .org and put them in the .com database, but I am busy today.
I have a desktop running Linux Mint, Firefox with IcedTea plugin. It doesn't work with Chromium. I also have a laptop running Ubuntu, Firefox I think again with IcedTea. I'll double check this later.
My Mint machine seems to have Java version 7, update 79; IcedTea-Web1.5; Firefox 40.0.3
I've copied "2 Pronged Chess" and a couple of comments over to the new database. Other than a couple of comments concerning our move, I think this is all that was lost.
Most things seem to be working fine now. Some editor functions are down, so the review of submissions might take a little while. Let us know of any other bugs you encounter! (I still would like to address Muller's concerns over escaped characters like & and < and also linebreaks, but I need to find a way that won't break any old materials. After all that is settled, I hope to spend some of my winter break working on additional features including the nicer text entry systems discussed earlier.)
You should also add those games to your Favorites! (from a game page when you are logged in, under the first menu item)
Oh, sorry H.G., I was referring to Kevin Pacey's remark that editing comments was impossible altogether. I was delaying adding code to escape html characters because I thought perhaps a new entry system might take care of it for me. But now I think it will take me too long to work out the details of that, so I will try to add the escaping later today or tomorrow. Perhaps the problems with your user-submitted page have to do with the transfer?
...and now I can't edit my comments again. I checked the script, my change is still there; so I don't know what the problem is now.
I think I have escaping working properly for editing one's own comments. If you find no flaws there, then I will try to make similar changes for new posts, editor functions, and then will move on to member submitted pages.
I think editing user submissions should now work better w.r.t. escaped characters.
25 comments displayed
Permalink to the exact comments currently displayed.