24-05-2003 21:40									#1
	Problems with attachments Remove this text

As I wanted to download an attachment, today. I had to log in although I was logged in. But it comes better: I have disabled the image view so that attached images are shown as links, in order to avoid some clicking I decided to reanable the image view. But once I opened a thread that contained an attached image it showed the line:

User XXX has attached this image:

then nothing no image even not a link. So that was in Mozilla 1.3 and Opera 6.04. Well Netscape 4.78 just shows a missing image image. Well in Netscape 4.78 I have a link that I can follow but again I have to relog in.

Well what is the problem Markos and when is it fixed?

-Martin

	26-05-2003 22:57									#2
	Support Apolyton, buy Galactic Civilizations: Deluxe Edition

I Forgot to mention that I don't use cookies.

-Martin

	26-05-2003 23:08									#3
	Support Apolyton, buy Civilization III: Complete

I have had the same problem.

	27-05-2003 00:30									#4
	Support Apolyton buy from Amazon

use cookies or allow cokies from our site

	27-05-2003 02:47									#5
	Support Apolyton, buy Alpha Centauri

A good site has non cookie support. So is Apolyton a good site?

However I will disable this cookie junk again, I am tired of these click, do you want accept this and that cookie. So should I do it now forever to allow only the ones from Apolyton and never from other sites. So far I did not find the the option in Mozilla just allow cookies from the following sites. And actual there is no need for that if we only have good sites.

-Martin

	27-05-2003 02:50									#6
	Support Apolyton

quote: A good site has non cookie support. So is Apolyton a good site?

no

	27-05-2003 04:02									#7
	Full PM-box? Change here!

A forum can't work without cookies. Don't complain.

	27-05-2003 05:35									#8
	Get a bigger avatar today!

Yeah... small price to pay for a great FREE gaming site

	27-05-2003 11:44									#9
	Inflate your Upload Space

I'm not sure if just setting the brows forum with cookies to no will make it possible. I'm sure that having that setting to yes and not accept cookies will cause trouble.

	27-05-2003 12:04									#10
	Increase Your PM Length

Okay, I'll test it in Opera 7.1 with cookies enabled and disable them for vB.

* Rasbelin tests.

Tried to download a unit ZIP from the Civ III file forum, and I had no problems doing that,

Martin,

just enable the cookies or use a newer browser.

	28-05-2003 09:41									#11
	Suffering from ads?

I have a similar issue in Safari Beta, but since it's still in beta I don't complain... if it's overly important I just ask somebody to e-mail it to me.

In Safari I get the full php code of the download script in hex. I could probably find the actual URL somewhere with the file if I had the time to decode it all, but it's easier if you have problems just to PM somebody to send you the file via e-mail.

	28-05-2003 15:02									#12
	Support Apolyton, buy Galactic Civilizations: Deluxe Edition

quote: Originally posted by skywalker A forum can't work without cookies.

You need the cookies to identify yourself as a member.

	29-05-2003 08:36									#13
	Browse Apolyton AD-FREE

If you disable cookie use on the forums, it will add

s=a;lsdkgjaskjfdhgafdkjhe4rGIBBERISH

to all the forums addresses to identify you as you browse around. Problem with this (that they had at Something Awful) is that if you post links with that in it is possible but difficult for someone to take that and acquire your password. There was a rash of people having their accounts stolen last year due to this.

	29-05-2003 14:05									#14
	Avatar Enlargement: We've got the solution

quote: Originally posted by ixnay Problem with this (that they had at Something Awful) is that if you post links with that in it is possible but difficult for someone to take that and acquire your password. There was a rash of people having their accounts stolen last year due to this.

I am not sure about this, but it seems quite unlikely such a thing could happen. If it did, it's a problem with a specific program istead of using the http header to pass information.

	29-05-2003 16:56									#15
	Avatar Enlargement: We've got the solution

Of course, when you post a link you could always edit out that bit. But then, you would need to know what you are doing.

Easier is just to let 'Poly use cookies. If you set it on a site basis, there is not much security risk.

	29-05-2003 17:06									#16
	Enter the AD-FREE zone

I let 'poly use cookies and I still get the s=gibberish. I edit it out whenever I link.

	29-05-2003 17:32									#17
	Support Apolyton buy from Amazon

Are both your browser and Apolyton's control panel set to allow cookies?

	29-05-2003 21:30									#18
	Increase the size of your Attachments

You need to set your ACS options as well, otherwise it wouldn't know your browser accepts cookies from the site.

	29-05-2003 21:45									#19
	Get a bigger avatar today!

quote: Originally posted by Asuka Okay, I'll test it in Opera 7.1 with cookies enabled and disable them for vB. * Asuka tests. Tried to download a unit ZIP from the Civ III file forum, and I had no problems doing that, Martin, just enable the cookies or use a newer browser.

No to cookies, I know browsing the internet is risky if you want to save your privacy, but you shouldn't make it easier then necessary. And for a newer browser I would say Mozilla 1.3 is a new browser and updating from Opera 7.03 is ... Well and I doubt it would help.

quote: Originally posted by ixnay If you disable cookie use on the forums, it will add s=a;lsdkgjaskjfdhgafdkjhe4rGIBBERISH to all the forums addresses to identify you as you browse around. Problem with this (that they had at Something Awful) is that if you post links with that in it is possible but difficult for someone to take that and acquire your password. There was a rash of people having their accounts stolen last year due to this.

That is not true also your IP number and browser is encoded in this hex number.

quote: Originally posted by skywalker A forum can't work without cookies. Don't complain.

That is not true, a forum can work without cookies. Or tell why there is the option in my profile to browse without cookies. Tell me why I can post without cookies.

Well if I hit the post reply button I can post without having to relogin. Also when I hit the new thread button or I click on the controll panel, search, members and on the forum quick links on the top of each forum page. So a forum without cookies is possible.

The only questions that is left is why I have to reloagin even if I am logged in, when I click on the edit link, on the reply with quote link, the userprofile link or if I just want to see an attached image?

quote: Originally posted by MarkG quote: A good site has non cookie support. So is Apolyton a good site? no

Then make Apolyton better, it can't be so difficuilt to fix the links I mentioned above.

-Martin

	29-05-2003 21:55									#20
	Support Apolyton, buy Galactic Civilizations

I'm just repeating what I remember was said on the Something Awful forums. Ask Lowtax what happened if you really care that much:

lowtax@somethingawful.com

And I don't see why you are so deadset against using cookies. You seem like you're just overly paranoid that using them will cause you to completely lose all of your privacy.

It's my opinion that the owners of sites shouldn't need to pander to people who can't be bothered to actually make easy upgrades or utilize non-harmful technology.

	29-05-2003 22:00									#21
	Put an end to popups!

Cookies weren't made evil. It's the evildoers who abuse them for their evil business, who make them an instrument for violating your privacy.

	29-05-2003 22:04									#22
	Support Apolyton, buy Call to Power 2

at MarkG's reply... that's something we should add to the quote database.

	29-05-2003 22:41									#23
	Support Apolyton buy from Amazon

quote: That is not true, a forum can work without cookies.

Ever tried to write your own forum software? Of course it can, but it's not easy to do.

Writing forum software without being able to use cookies is like writing SLIC without being able to use variables. Of course that would be perfectly possible, but I sure as hell am happy to be able to use variables...

If we had people working on the site full-time, I'm sure Markos wouldn't mind looking into it. But we all have lifes next to the time we spend on 'poly. And quite frankly, using the Internet without cookies is hopelessly out-of-date. I know few websites that offer personalized content and that don't use cookies...

	29-05-2003 22:49									#24
	Avatar Enlargement: We've got the solution

quote: Martin Gühmann: "A good site has non cookie support. So is Apolyton a good site?" MarkG: "no"

Aah, you have a good taste when it comes to signatures, Asuka.

	29-05-2003 23:05									#25
	Get a bigger avatar today!

Especially as the previous one included a quote by you.

	30-05-2003 08:51									#26
	Browse Apolyton AD-FREE

quote: Originally posted by Martin Gühmann No to cookies, I know browsing the internet is risky if you want to save your privacy, but you shouldn't make it easier then necessary.

Cookies are just bits of persistent information saved by your browser to get around the stateless problem of HTTP. It's like a hammer. You can certainly bash somebody's head in with one.

quote: Originally posted by Martin Gühmann That is not true also your IP number and browser is encoded in this hex number.

Nitpick: it's not a hex number it is a character string. I also don't think the IP number is in there.

quote: Originally posted by Martin Gühmann That is not true, a forum can work without cookies. Or tell why there is the option in my profile to browse without cookies. Tell me why I can post without cookies.

Cookies or strings. Take your pick.

	01-06-2003 02:11									#27
	Got spare money?

quote: Originally posted by Urban Ranger Nitpick: it's not a hex number it is a character string. I also don't think the IP number is in there.

Yes finally it is a string, but it is interestingly that it only conatians these characters:

0123456789abcdef

And this is a hex number represented as string. Well if it does not contain my IP address then I wonder why I have to relogin when I got disconnected and I got another IP when I reconnect? What else could identify this.

quote: Originally posted by Urban Ranger Cookies or strings. Take your pick.

I take strings, these strings are not saved on my hard disk.

And now for the non cookies support request: I must say this is nothing impossible, for instance if I want to downlaod an attachment then the link does look like this:

forums/attachment.php?s=&postid=1301962

You see the: s=

after this s= there should be the string. Well if I visit Civfanatics or the vBulletin 3.0.0 Beta 2 board then there is the string behind the s=. So I don't request something impossible. Well looks like an vBulletin issure, as Civfanatics uses vBulletin Version 2.2.6. Possibly upgrading the board would be also an antiserver-load meassure.

	01-06-2003 02:21									#28
	Support Apolyton, buy Galactic Civilizations: Deluxe Edition

quote: Originally posted by Martin Gühmann Yes finally it is a string, but it is interestingly that it only conatians these characters: 0123456789abcdef

Ever heard of Hexadecimal numbers? (h, well reading on shows that you have )

quote: And this is a hex number represented as string. Well if it does not contain my IP address then I wonder why I have to relogin when I got disconnected and I got another IP when I reconnect? What else could identify this.

Actually it's a unique number generated by an algorithm (MD5 IIRC) based on the time when yuo got to the site for this session IIRC.
It's stored on Poly for a time (session timeout or until you logout) together with your IP to identify you.
Which mean that the IP and the session string has to match for you to stay logged in. (The session hash on the directory is not matched to IP, so they are easier to use to steal someones account)

quote: I take strings, these strings are not saved on my hard disk.

As most browsers keeps track of recently visited URLs they are stored, unless you disable that too.