A Few Site Updates & Misc News

tliebeck's picture

I've been updating a few items on the site in the hope of making things a bit easier....

First and foremost, there is now a list of recently updated topics on the forum home page. I hope this makes it easier for those who like to keep up to date on forum posts.

We still don't have "subscriptions" in place yet, but it looks like they just released an updated stable version of the Drupal subscriptions plugin: http://drupal.org/project/subscriptions. Hope to have this installed soon (if it proves to work well).

I've been mass deleting users who have never logged in. If your account was terminated, please re-register. As much as I'm a fan of this site's Drupal engine, it appears to be an easy target for link spam (you can register an account without verification and have your home page link displayed in your "unverified" user profile). I'm shocked to see this. To correct this issue, your profile home page link may now only be set once you confirm registration (this won't stop bots that don't care). I've added an inane and mandatory "spam verification" checkbox on the reg form (this *may* stop bots). If it continues, a CAPTCHA will be showing up soon.

CoreDoc (JSDoc engine for Core.js) is fairly close to working properly. This thing will parse classes built using Core.extend() and generate JavaDoc-like HTML API documentation. The generator will be released under the MPL. Echo and Extras client-side docs will be available in the very near future. I'm thrilled to have this thing operating, as browsing generated API docs is a great way to make certain an API has been "done right". (And they're not half bad for figuring out how to use one, either :D).

Best
--Tod

tliebeck's picture

The spam verification

The spam verification checkbox has done nothing to stop spam registrations. The bots appear to be smart enough to automatically check boxes. The good news is that the link spam is gone as a result of website URLs not being configurable until login. This spam attempt is clearly not the work of humans, because they either wouldn't bother registering once they saw the "website URL" field had been deleted until after login, or they'd login and change it.

Any account not logged into at least once will be deleted.

If anyone sees any other types of spam on this site, please let me know.