Jump to content

Ken

Members
  • Posts

    316
  • Joined

  • Last visited

  • Days Won

    2

Posts posted by Ken

  1. I'm more concerned with the fact that they're telling you all that it's not secure but a loop hole. It's not PCI compliance but rather avoidance.

    As a business owner/manager and credit card merchant your primary goal should be keeping customer data secure.

    Stripe has multiple methods for integration. Why would anyone just assume it's using stripe.js?

    I really don't see the big deal with documenting it to make everyone happy, it seems simple enough, but I also don't get the witch hunt here.

    If you didn't know before, you know now.

  2. Yes, lol, sorry for not replying, so many things at the same time that I have forgot you complitly :(

    Did you have the problem solved for what you ask me to implement on SolusVM, default SolusVM Username as Blesta Client Username?

    Oh no worries at all, Paulo, I can relate.  Tyson helped me accomplish what I wanted.

     

    Haven't looked at the code in-depth, but what happens most likely is that it updates the contacts' table information but not the users' table.

     

    Blesta registration basically goes first to the users table, then creates a contact entry.  When you update the contact's email, Blesta is only focused on the contacts table itself, leaving the users table to be untouched.  This would be an easy fix to add into the code, and as long as the contacts.contact_type == "primary" update the user's information as well.

    I'm guessing that Blesta has no flag or setting for "email as a username" and so it doesn't know whether the user has chosen one or the other.  The "email as a username" function is just on the registration form itself.  Basically just entering a variable based on the user's email address.  Same with the admin client edit.

     

     

  3. Yes :)

     

    In my opinion, Blesta should remove the "Use Email as username / Use Username" and always use email as username.  Almost every hosting bill  use email as login, and it is the most used and the most  sence on using it :)

     

    Paulo remember our discussion about SolusVM and the username issue?  Enforcing usernames helps accomplish that.  It is also key in using the shared login plugin since a username is permanent where an email address is expected to be changed at any given point. Then there is the issue of username predictability (in some situations).  So there is going to many cases where email address won't be ideal.

     

    The username function is very important.  I think there should be two modes that are configurable from admin that modifies the registration page.

     

    I made a feature request here:  http://www.blesta.com/forums/index.php?/topic/2660-toggle-email-as-username-on-registration/

  4. I've come across problems with this feature more than a couple of times so I'm suggesting that there be a toggle for disabling the Email as Username feature on registration forms without having to edit the form itself (since it'll get overwritten on updates anyway).

    Also if the email address method is used for usernames it's of my opinion that when the user updates their email address the username should be updated as well.  Otherwise it's no different than using the Username method and entering an email address.
     

    http://www.blesta.com/forums/index.php?/topic/2659-client-email-address/

  5. The username can only be updated/changed by staff/admin and not by the client.

     

    So the email as a username function is a onetime deal upon registration?  That's kind of confusing to the client users I think. If people choose email address for usernames it's only logical that their current email address and any email address they change it to will be their login. That's how every sign-in service works.

    I can delete that function from the registration form but it'd be nice if we can toggle it in the admin panel. But even with that it should still use the updated email address if that mode is used in my opinion.

  6. Hello,

     

    Just noticed this note in the docs:

     

    "Because each request contains your API key, and may contain additional sensitive information, you should only process requests remotely over a secure connection (i.e. only use HTTPS)"

     

    So what is the best method to make use of the API in your scripts if you don't have a SSL cert?

    Why are you unable to use SSL?

  7. I would test them, and if they work then you're probably fine. Often times extension upgrades do not alter the database, so performing the upgrade has virtually no affect besides making the system recognize the new version. If it does alter the database, well then you're likely to get errors.

     

    Will do.  Out of curiosity is there a place where I can see the current versions and check them that way?

  8. heh, for some reason it was fun!

     

    Yeah :) I like pressing that upgrade button and Bam done :D

     

    Characters.   :lol: 

     

     

    Check that all plugins, gateways, and modules have been upgraded in the settings. It may not have been able to upgrade one of them, based on that indicator. Your core should be fine. 3.2 attempts to upgrade all extensions that need upgrading so that you don't have to do so manually any longer.

     

    That was one of one of the first things I checked and none of them are upgradable. If that function has been removed (or has it?) would it still be there anyway?

    Is it safe to assume that they have all been upgraded or should they be checked?

     

  9. 2/3 66%?   Does anyone else get that?  It seems to upgraded okay so far.

    ----------------------------------------
    Blesta CLI Upgrader
    ----------------------------------------
    Upgrade from 3.1.2 to 3.2.0? (Y/N): y
    7/7 [========================================] 100%
    2/3 [==========================>             ] 66 %
    Finished.
    

    Btw the Client Area looks beautiful.  Great work!  

  10. The only thing that I have found to dislike is the handling of phpmyadmin. The way it is setup by default could create a large security risk for admins that just use a default install. I made a post on the vesta forums about it. https://forum.vestacp.com/viewtopic.php?f=14&t=4800 

     

    Other than that one feature I have found that this is the most robust and easiest to customize control panel.  Compared to a lot of the the other open source control panels this one is the lightest and has things setup in logical ways.

     

    Have you heard any updates on this?  Just curious since they haven't updated the release date on the roadmap.

  11. Nothing to do with the price, those boxes have plan information. As a visitor, I want to see what's being offered. If you can't show me the goods in 2 seconds I'm gone. Sounds rough, but people are incredibly impatient.

     

    Edit: Probably shouldn't have said "nothing to do with the price", price matters but my point still stands -- whatcha got? :)

     

    Well where's Blesta's pricing and packages?  :P

  12. whichever you go with the pricing options shouldn't be all the way at the bottom. Closer to the top, would be better.

     

    Are you suggesting this because of his price point?  I wouldn't apply this rule in general.  Some services are better off selling their product before jumping into cost.  They don't call it "damage" for nothing.  :)

  13. I try and make things as elegant but without using images and relying on css for a couple of reasons  First, obviously, to reduce overhead but more importantly avoid having to double size everything so that when it gets resized on a Retina screen it still looks sharp.  It's just hard to accomplish that with anything before IE9.

     

    I just wonder if their new website/Metro UI design was influenced by their lack of browser support.

     

     

    MSIE is a royal pain in the butt for all web developers. I think we've learned to despise it. Make something that looks sweet in Safari, Chrome, Firefox,.. open IE and cry.

     

    Story of my life. I've had pretty good luck with IE9 so far so hopefully those days are passed us.  

  14. Completely random thought... but do you ever draft up a web design and make it look amazing in every browser out there until you try anything prior to IE9 only to find that your design suddenly looks like Windows Metro?  A bunch of colored blocks.   :lol:

     

    Hmm I wonder...  ^_^

×
×
  • Create New...