You could also use CloudFlair to combat intense attacks. 

During upgrading can we please change the Username/Password fields (what ever mechanism) to allow use of 1Passowrd.  Ideally add ability to sing in using Apple/FB/Google? 

Base64 unique for each member which the member could reissue a new url if they wished. 
 

Yes this is the point the key should be unique if you intend to send someone a referral / invite the the forum that is fine.

What the problem is would be spammers are using the fact the URL is static and you can manufacture the URL they are now using it as a vector and way of spamming other members for no reason it causes confusion and more explanation than it's worth as most people don't know they have referrals. 

I had to disable the entire referral system because of this. 

random people most likely spammers can see that the url is tied to a member account for what ever reason it is an annoyance to the person who never referred anyone also get notifications to the contrary. 

I don't think it's a good idea to use the the members ID as the referrer and should be dynamically generated. it's too easy for actors to spoof this:  

domain.com/?&_rid=#####

seeing a rise in people registering via a link without it being initiated from the member. 

Thanks, I think I have it working, but I did have one question regarding login into the ACP if I am using AppleID should really need the 2 Factor code since I am using biometrics?

https://mydomain.com/oauth/callback/

So I was reading a post by a user and I noticed at the bottom it was edited by someone else. The name wasn't a moderator or anyone who would have permissions to edit another's post. It would appear that the user made the post then edited their post then changed their display name - however the "edited by" remain the previous name. Also when I searched for the old name it didn't find any member.

Is it possible when a name change happens, that any edited posts reflect the change? 

I know there is a history of changed names on the user profile and in the recent account activity. 

It would be nice if you search for a member from ACP it would find the new person if searched on the old name. 
 

Any ideas on to get this working?

I just got my apple developer account setup and followed the directions but I get this error 

invalid_request

Invalid web redirect url.

Tried to upgrade not sure why I got this. 

copied and pasted it again - all is good not sure why got cleared. 

This issue still exists and for the tl;dr it happens with or without the application it doesn't seem to occur on new blogs, but users/blogs from long-time members it happens to - this also does not occur when RSS is posted to a forum. 

Any one else get this set up - the form in the CP is requiring more fields be entered then I can find on the Auth0 console. 

Is there some clear instructions to setup logging in with Auth0?

I can't put my finger on the cause but it does seem to happen around updates where my custom settings for the Editor's toolbar are not preserved.

Has anyone else see their editor revert to default for no apparent reason? 

https://www.theregister.com/2023/05/23/meta_giphy_sale/ 

Interesting read. 

hover over the members count and you should see it in the url 

or click on the group and look at the url. 

Can you please adjust the tags or IDs or whatever is needed so that this page will work with 1Password. 

https://developer.1password.com/docs/web/compatible-website-design/

An advertiser inquired to pay annually vs monthly, what would be the easiest way to set this up? Adjust the store to add an annual option, then allow them to upgrade to a different payment option or Just have them buy a gift card to them and add that card to their account future ads would deduct from the gift card?

we could probably pass the about page thru GPT to get a rank if it is boilerplate sweatshop spammers its very consistent especially the URLs that resolve to India. 

lol, I leave mine on I am instantly able to see they are spammers and then ban them no real user seems to ever fill out their profile to such completeness. 

I guess my thought was just like the widget's upcoming events,  as an event approaches it could nice for it to be promoted in the activity stream as it is relevant. Currently, it only shows up in the activity feed on the date it's added to the feed which could have been weeks or months back as it is not repeated. 

I'd be more concerned about sending webhooks to a US-based company there is a lot of PII in there including all profile info if they provided such as email, gender, birthday, full name, and all profile fields even if we disallow showing them publicly their profile.

 

for this very reason there is a whole industry of species known as Attornys, Lawyers, Barristers, and tangentially General Liability Insurance companies.