Just a series of backend fixes; refactor board pages to use proper APIs; rudimentary public RSS feed; fixes to Preferred Player purchase processing, etc.
Dozens of small improvements across the game that were noticed after analysing this week's error logs.
More updates to come (actual user-visible stuff next time, hopefully, but it's all positive stuff).
More backend work today:
- Add double-submit CSRF token feature to mitigate exploits - makes it harder for third parties to trick you into doing actions with your account from hidden forms on their website
- Minor redirect and error page tweaks to look slightly less bad
- Remove some lingering ancient volatile GET requests - more conformant to modern standards
- Add recent threads to sidebar advert box that appears on various pages
- Declare all static assets to be immutable, improving caching performance - this one should improve perceived site speed by making sure your browser holds onto page assets very aggressively
There's also been some work on the chat system's backend, and the beginnings of a modern frontend for it, though this is yet to be deployed.
More backend stuff:
- Modernised password hashing; newer algorithm, transparent upgrade at login; better auth tokens and Remember Me cookies
- Migrate old Trade Block code into new auto-loading API classes; no functionality change for now, but lays foundation for user-facing improvements
Plus a few fixes and tweaks:
- Remove a few duplicate CSS file includes
- Various follow-up tweaks to Point Raffle; better messaging on page; daily jackpot booster
I think there's more to do with Point Raffle page, but hopefully it's a touch better than it was.
