Jump to content

Daddy

Clients
  • Posts

    567
  • Joined

  • Last visited

  • Days Won

    2

Daddy last won the day on September 15 2021

Daddy had the most liked content!

2 Followers

Profile Information

  • Gender
    Male

Recent Profile Visitors

7,529 profile views
  1. I'm not fully understanding the new theme editor. How do I modify the entire page without having to inject my code with pre-defined placements? My design is completely custom. I do not like IPS design personally. Am I missing where to access the raw template code?
  2. I'm not trying to beat anyone up over this, but I don't see how the coming and going of those with admin access is relevant to security. Not everyone with ACP access has full access. We utilize the in-depth permission system to give team members certain scopes to work with. But even with a small team that rarely changes, their IP will change quite often, which means using a firewall to block access will be impossible without some type of custom integration. 2FA does solve the problem, but I (and I'm sure others) would prefer not to have the page accessible to anyone. Given IPS is a well-known software, the default location is easily accessible and is a very common path that many other CMS's use. It would make me feel better being able to set a unique name so people can't stumble upon it, even if it's secure. Was there any particular reason this feature had to go? I agree it didn't make much sense in regards to security, but it didn't hurt? I feel like the usefulness of this was underestimated when this was decided upon. The lack of a deprecation warning until now seems a bit odd as well. Surely this is going to be overlooked up until IPS5.
  3. I mistook the default for admincp instead of just admin. My mistake on that one. But regardless of the point, security through obscurity is a fantastic layer of security and one that should not be removed. Sure, you can block the page in your firewall or Cloudflare rules, but there's no easy way to make this dynamic. Anytime you add or remove a user with ACP access, you now have to whitelist their IP, many of which are dynamic and change every other day. It’s simple enough to keep and is especially useful for adding an extra layer of security to your suite. If you truly think obscurity isn’t a secure measure, let me introduce you to steganography! (Directed at Jim)
  4. If this is the case, why did Invision change their admincp location from default?
  5. Need to know what changed in forums -> front -> index -> forumRow as it's not listed in theme differences
  6. Upload a new version of a file. It doesn't matter if you add more screenshots or not. Go into changelog and select the previous version. Click restore. Now clear your cache and all of the images will be broken. You can verify this by clicking update and scrolling to the screenshot section to see they're all 0mb.
  7. When you restore a previous version, not only are the screenshots deleted from the version that got reverted, but all screenshots are deleted. While they may appear to still be there the file manager shows them at 0mb and when your cache expires it shows a broken image for every single screenshot uploaded, regardless what version it was added in.
  8. As the title states, Stripe has CashApp Pay integration, but IPS integration is falling behind. Would be great to have this added. While you're at it, WeChat and Link are also missing.
  9. Yeah I don't see developers sticking together on a single marketplace. We'll end up with at least a dozen off the jump so be mindful where you buy.
  10. Here's mine for reference: (not http.cookie contains "ips4_member_id" and not http.request.uri contains "login" and not http.request.uri contains "register" and not http.request.uri contains "app" and not http.request.uri contains "contact" and not http.cookie contains "ips4_IPSSessionAdmin" and not http.request.uri contains "terms")
  11. Alright, so I cleared cache + redis cache + cloudflare cache, and it seems to be working now on Edge and Chrome. I haven't tested Firefox.
  12. Any traction on this? Not having guest caching is a huge problem.
  13. I dug a bit deeper, and it seems the issue is users being able to type in an incorrect name while gifting a file. If the user does not exist, this error occurs where the invoice does not get marked paid. Trying to mark it manually paid produces the above error.
  14. The invoice was never marked paid, despite payment being accepted. The mark paid is me trying to mark it paid in the ACP but it errors out.
×
×
  • Create New...