Bay 12 Games Forum

Please login or register.

Login with username, password and session length
Advanced search  
Pages: 1 2 [3]

Author Topic: I've been unable to update my forum profile  (Read 3778 times)

Egan_BW

  • Bay Watcher
  • Perhaps I'll
    • View Profile
Re: I've been unable to update my forum profile
« Reply #30 on: February 23, 2021, 09:17:04 pm »

*Points at the middle sentence in the comment right above yours.
Logged
Down at the bottom of the ocean. Beneath tons of brine which would crush you down. Not into broken and splintered flesh, but into thin soup. Into just more of the sea water. Where things live that aren't so different from you, but you will never live to touch them and they will never live to touch you.

Maximum Spin

  • Bay Watcher
  • [OPPOSED_TO_LIFE] [GOES_TO_ELEVEN]
    • View Profile
Re: I've been unable to update my forum profile
« Reply #31 on: February 23, 2021, 09:20:50 pm »

It is probably imgur's doing, yes. They've changed something about how they deliver images lately and I can't actually see anything from imgur anymore (no loss, frankly). It sounds like the forum software is trying to fetch the image to use as your avatar, imgur's server is unreachable or not fulfilling the request, so the forum gets stunlocked.
Logged

methylatedspirit

  • Bay Watcher
  • it/its
    • View Profile
Re: I've been unable to update my forum profile
« Reply #32 on: February 23, 2021, 09:32:02 pm »

Strange... is there something fundamentally different about how the forum software fetches images for posts vs avatars? In posts, the software doesn't care at all where it comes from (as long as it's a valid image link), but in avatars, it's really uncertain as to if the image link works at all.
Logged

Maximum Spin

  • Bay Watcher
  • [OPPOSED_TO_LIFE] [GOES_TO_ELEVEN]
    • View Profile
Re: I've been unable to update my forum profile
« Reply #33 on: February 23, 2021, 09:44:15 pm »

Strange... is there something fundamentally different about how the forum software fetches images for posts vs avatars? In posts, the software doesn't care at all where it comes from (as long as it's a valid image link), but in avatars, it's really uncertain as to if the image link works at all.
Well, in the case of posts, it doesn't, it just shits out an <img> tag and your browser does the rest. The forum software itself never has to touch the image as far as I know.
Logged

scriver

  • Bay Watcher
  • City streets ain't got much pity
    • View Profile
Re: I've been unable to update my forum profile
« Reply #34 on: February 24, 2021, 07:34:41 am »

What's the address of the image you want to use Egan?

I know imgur makes you go through a bunch of hoops to get to the actual image (may be to discourage hotlinking?) do a lot of people end up using album links by mistake.

Logged
Love, scriver~

Egan_BW

  • Bay Watcher
  • Perhaps I'll
    • View Profile
Re: I've been unable to update my forum profile
« Reply #35 on: February 24, 2021, 03:06:23 pm »

Nah, it was the real image address. And remember that it was still working as an avatar until I set it to nothing. I'm just unable to set it to an imgur image now, but I was able to do so in the past.
Logged
Down at the bottom of the ocean. Beneath tons of brine which would crush you down. Not into broken and splintered flesh, but into thin soup. Into just more of the sea water. Where things live that aren't so different from you, but you will never live to touch them and they will never live to touch you.

Bumber

  • Bay Watcher
  • REMOVE KOBOLD
    • View Profile
Re: I've been unable to update my forum profile
« Reply #36 on: February 25, 2021, 05:52:56 pm »

It is probably imgur's doing, yes. They've changed something about how they deliver images lately and I can't actually see anything from imgur anymore (no loss, frankly). It sounds like the forum software is trying to fetch the image to use as your avatar, imgur's server is unreachable or not fulfilling the request, so the forum gets stunlocked.

Can you see my avatars? They're hosted by imgur, but rotated through signavatar.
Logged
Reading his name would trigger it. Thinking of him would trigger it. No other circumstances would trigger it- it was strictly related to the concept of Bill Clinton entering the conscious mind.

THE xTROLL FUR SOCKx RUSE WAS A........... DISTACTION        the carp HAVE the wagon

A wizard has turned you into a wagon. This was inevitable (Y/y)?

dragdeler

  • Bay Watcher
    • View Profile
Re: I've been unable to update my forum profile
« Reply #37 on: February 25, 2021, 05:57:53 pm »

1 confirmed avatar sighting
Logged
let

Maximum Spin

  • Bay Watcher
  • [OPPOSED_TO_LIFE] [GOES_TO_ELEVEN]
    • View Profile
Re: I've been unable to update my forum profile
« Reply #38 on: February 25, 2021, 08:57:58 pm »

It is probably imgur's doing, yes. They've changed something about how they deliver images lately and I can't actually see anything from imgur anymore (no loss, frankly). It sounds like the forum software is trying to fetch the image to use as your avatar, imgur's server is unreachable or not fulfilling the request, so the forum gets stunlocked.

Can you see my avatars? They're hosted by imgur, but rotated through signavatar.
In your case, yes. Fascinating.
Logged

Starver

  • Bay Watcher
    • View Profile
Re: I've been unable to update my forum profile
« Reply #39 on: February 25, 2021, 09:57:11 pm »

It just means that signavatar.com is more accepting of whatever-the-imgur-URI is for the currently rotated choice, then republishes that as the 59798_v.png of the momenf on its site, in a form the Bay12 sanity checker has no problems with. (The signavatar URI is serving on plain http

Maybe there's a simple tweak in the regexp the SMF backend uses to (not) validate the imgur address (like making it m/^https?:\/\/\w+(…whatever…)$/i, if that isn't more dangerous for cross-host scripting exploits - need to research that properly). Maybe there's a better imgur URI to try that doesn't fall foul of the existing one.

But from the "does nothing for ages" I'm thinking it does like the (non-https) address, but then fails to failsafe when it pokes the source given (to check it doesn't, at least this one time, try to serve a TB-sized explicitly uncachable image, maybe?) and the source doesn't like the poke.

Perhaps the user-agent sent by the SMF backend's HTTP fetch is blacklisted now?

It wasn't originally, I presume, and once set in the those hallowed days of permissivenesz it was only ever accessed by reader's browsers providing (mostly?) unblacklisted user-agents - but on trying to update the profile settings SMF checked that field (as with all others) exactly as it was configured to before, but now with no luck due to the newer block.  The increasingly DDOS-proofed imgur server (or firewall/traffic-shaper in 'front' of the cluster) is saving itself a headache by just letting the port 80 request time out if it doesn't like the request header.

How to solve that? Well, I could see a modification (or modified copy, under this case only) to the URI-test procedure to change it to pretend to be an Edge/Firefox/Chrome/whatever browser instead of whatever innocently accurate but detested agent name it has now ("SMF Test Request", maybe, instead of the silly and sometimes totally misleading-to-cadual-observers compatibility/equivalence indication strings[1] from 'true' browsers).

I could also see the straight disabling/hobbling of the fetch-test (except that it probably stops certain problems that I wouldn't advise letting through unimpeded) so that it doesn't block like that.

Possibly Tarn could manually open some of the backend files and insert the (manually OKed) URI in there, but I don't know what format (flatfile text, YAML, .db, whatever) it is stored in, it might (ought to!) be further wrapped up in salted encryption to prevent 'simple' hacking, if done wrong it could nix the whole forum... and if one person asks then loads might - and I wouldn't want to be the one responsible for sending hordes of requests his way. Especially not being familiar with running SMF myself and almost all of this being (logical, semi-educated) guess and conjecture...


So... Set up a signavatar of your own (rotate 1 of 1 forwarded imgur images)? Find a workable alternate host (keep the imgur for reference in case your new choice is short-lived)? Get Tarn to lay off DF work to update SMF to latest version that might have the coding changes needed, 'only' breaking a half dozen or so other things us forumites like, in the process?


[1] e.g. "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36 Edg/88.0.705.63"
Logged

Strik3r

  • Bay Watcher
  • Persistently work-in-progress.
    • View Profile
Re: I've been unable to update my forum profile
« Reply #40 on: March 08, 2021, 01:58:51 pm »

What i think is happening is that at some point Imgur stopped allowing fetching/whatever through HTTP and that somehow causes SMF to hang?
Maybe Imgur never gives a proper response/SMF doesn't understand it so the forum software just keeps on waiting until it times out?

Either way, as the forum doesn't like HTTPS, Postimages.org is a viable alternative to Imgur for now as it is still okay with HTTP requests. Postimages has its own problems but for profile pictures it's fine.
Logged
NOTICE: If you can't update your profile/signature, stop using a Imgur URL for your profile picture.
Upload it to somewhere else.

DogsRNice

  • Bay Watcher
  • Urist Maclunky
    • View Profile
    • Steam profile
Re: I've been unable to update my forum profile
« Reply #41 on: March 12, 2021, 12:02:05 am »

Im having the same issue im trying to add something to my signature
Could i be somehow triggering anti spam because it has a link? heres what im trying to add

Spoiler (click to show/hide)
Logged
I had an FB named Ned once.  I kept imagining a giant Ned Flanders...

Want an underground tree with green wood? Check out this tiny mod I made to add one

Starver

  • Bay Watcher
    • View Profile
Re: I've been unable to update my forum profile
« Reply #42 on: March 12, 2021, 08:14:47 am »

You've an imgur avatar image. If you tried the .sig without the link (frankly, anything, including "Test test test!") I suspect you'd be just as unable to update - showing that it's not (solely, but probably at all) the link causing the problem.

Choose whether to abandon your imagur avatar (or relocate/proxy your avatar hosting, like with Bumber) or not make any changes to the rest of the profile until you can organise a mob to storm the offices of imgur/SMF/Bay12 to fudge the emergent sticking point.
Logged
Pages: 1 2 [3]