• FutureRP
  • News Archive

Version 8.23.0 Released

More backend work today:
- Add double-submit CSRF token feature to mitigate exploits - makes it harder for third parties to trick you into doing actions with your account from hidden forms on their website
- Minor redirect and error page tweaks to look slightly less bad
- Remove some lingering ancient volatile GET requests - more conformant to modern standards
- Add recent threads to sidebar advert box that appears on various pages
- Declare all static assets to be immutable, improving caching performance - this one should improve perceived site speed by making sure your browser holds onto page assets very aggressively

There's also been some work on the chat system's backend, and the beginnings of a modern frontend for it, though this is yet to be deployed.

Published:

Version 8.22.0 Released

More backend stuff:
- Modernised password hashing; newer algorithm, transparent upgrade at login; better auth tokens and Remember Me cookies
- Migrate old Trade Block code into new auto-loading API classes; no functionality change for now, but lays foundation for user-facing improvements

Plus a few fixes and tweaks:
- Remove a few duplicate CSS file includes
- Various follow-up tweaks to Point Raffle; better messaging on page; daily jackpot booster

I think there's more to do with Point Raffle page, but hopefully it's a touch better than it was.

Published:

Version 8.21.0 Released

More security/robustness updates, plus a quality-of-life improvement for avatar uploads.

We now impose strict Content-Security-Policy headers site-wide, which hopefully will go unnoticed, but will reduce attack surface and mitigate some low-effort exploits. Suspicious activity on the registration page will impose an automatic IP ban, and CAPTCHA now required, since it's a nice modern accessible one now.

A regression on the Credit Multiplier page has been fixed, so credit submissions should work again. Additionally, player and guild avatar images now accept up to 2048x2048 images, which we will downscale to 1024x1024 for the master image, from which we will create various thumbnail sizes for use throughout the game. Slightly tidier setup than before.

Any problems at all, please post in the forum and we'll be sure to address them.

Published:

Version 8.20.0 Released

The Point Raffle page now limits tickets to 20% of current total tickets bought; you can buy more when other players buy extra and your share drops. This will stop one player buying millions of tickets and having a near certain chance of winning.

Additionally, each day, if Point Raffle is below its 10-participant limit, a random active player will be gifted a ticket to nudge things along.

Published:

Version 8.19.0 Released

More fixes and a refactor to improve performance and robustness of codebase:
- Large partial refactor of include modules into auto-loading class namespace
- Fix password reset link and various periodic emails which haven't been running consistently
- Track login sessions independently; added Login Sessions link to Edit Profile page
- Attempts to fix inaccurate tracking of hourly activity for players with multiple login sessions

f you notice any issues, please report them in the forum

Published:

Version 8.17.0 Released

Primarily a bug-fix release, including fixing some undefined variable warnings (though not visible to users, it was spamming the logs), more robust handling of excessively long query strings, and some behind-the-scenes code refactors for improved error detection.

Feature-wise, there is now an Item Transfer Log page (under Character/Logs in menu) to track transfers to and from your account, and a full Item Movement Log that tracks an items entire lifecycle from creation to destruction on the admin panel, for better debugging/moderation.

Published:
Active ThreadsForums