Topic: Online Harp Character Generator

[jasonbrisbane]

ToDo for version 1.7:

- change the password hashing to use AES. This will allow the password to be decrypted for...
- the ability to email the users current password to the account registered email address.

This will of course mean that all users  will have to 1) enter an email address into their account 2) reset the password for their account, which will be rehashed into the database.

- the accounts screen will have extra option:
 - modify email address

The login (main) page will have a Forgot password link to enable you to enter the email address and you will receive an email with your password.

I am also contemplating an Administration page inside the program, but will just look into this and hold off implementing this until the next version...

[enoch]

It's looking good, Jason! I'm especially stoked that you're using Ajax for the skills page. I just entered an old character (Durak Bloodbeard) and it took a lot less time than before. That said, I do have a few requests/observations.

• In the big text boxes for Equipement, Notes, Talents, etc., I'm having a hard time getting things to flow properly when I view my character. In edit mode I have everything on separate lines but when I switch to view everything is jumbled up. I noticed that when I inserted a "/" it caused a line break in view mode, but that ended up complicating matters.
• Resistance rolls aren't making it to the front page. Neither are Endurance Points nor Power Points.
• The character in question has a talent that provides a +5 to initiative, but I can't add that to the "other" box for initiative on the front page.
• A double-quote (") on the front page results in the following message when trying to save:
  

  Sorry, but an error occurred during the update.
  Please report this to the System Administrator.
  
• Including an ampersand (&) in a skill name results in the ampersand and the rest of the skill name not saving.

Keep up the great work, and let me know if you ever need a hand.

Mike

[jasonbrisbane]

Hi enoch,

1. the help file says you use the '/' to separate the fields (item/location/weight/item2/location2/weight2/etc)

2. I'll have a look at it.. Thanks

3. I'll look at this too.

4. Yes, double quotes are  not allowed. I will need to remove these out of all data to prevent issues.... I think it is mentioned in the helpfile but I cant remember exactly.

5. an ampersand is used by web pages to separate fields so yes it will cause issues..... Let me look into it...



PS: I will also be allowing people to be Admin's (i.e. me!) and allow them to view all log files for hack attempts, etc...Also they will be able to add "news" headlines which will be shown on a separate web page. The LATEST news headline will be shown on the fornt page with a link to "show more".

I havent looked at Ajax for page one but I might look into it...

[enoch]

Hey Jason,

Perhaps I don't have any ranks in Perception, because I didn't even notice the Help link. I promise to read the Help before posting next time. 

Mike

[jasonbrisbane]

hi mike,

np. 

[jasonbrisbane]

Hi enoch,


Yes, I goofed.
The next version will include checks to prevent and escape characters to prevent SQL injection attacks.

Yes, I didn't check BEFORE releasing version 1.

If the entire DB falls over in a screaming heap then dont worry as I have to make Db changes anyway for the next version.

Stay tuned for version 2.0...

[jasonbrisbane]

Hello All,

It pleases me greatly to introduce you to HARPCS online version 2.0.0!

There are quite a few changes, but some you wont notice as they are administrative additions.

Off the top of my head:
- a NEWS functionality and link at the bottom of each page.
- Access mechanism - users have a default level of user, and there are editors (change,add or delete News items), and Administrators - can view all log files.
- all modifications to the character sheet are done immediately using AJAX - no pressing a button to save, no screen refreshes - its all done immediately. You can do a refresh using your browser to force the page to reload from the server, if you like.
- changed pages to use std formating.
- all db access is now through a single function call.
- all fields are now checked for SQL injection attacks and data is "dealt with".
- any characters you wish to use will now be saved and will not bring an error (i.e. you can use single or double quotes as part of names, etc.)
- account details now include an email address (which is optional)
- Passwords can be reset, if your account has an email address recorded against it.

NB: whilst clever people will notice that accounts CAN be reset, the new password is auto-generated and will be emailed directly to that email address - so its pointless to try to hack their account...

NB: The passwords in the database have been left as mysql password generation as they cant be reverse engineered - only changed via the forgot password option!

As always, please let me know if you find anything wrong or suspicious by posting a comment here!

Thank you and have fun!

[jasonbrisbane]

And of course the link to this website is:


http://harpcs.ironcrown.com

[markc]

Glad to see things going well.
MDC

[Maelstrom]

Just went over there to test it out and thought I'd see how robust it is.  The skills take care of decimals but other areas that have numbers don't (like stats, stat bonuses, etc.)  You'll see what I mean when you check out the Trouble character sheet.

[jasonbrisbane]

HI,

I have added an Administrative function to reduce any pressure on Tim to modify my database.

Also I have modified the character sheet page one to include the following fields:

Endurance
Power points
Resistances (all 3)
Languages (4 lines)
Initative Modifiers (there are some issues that I am working on but this should be sorted in the next day or so)
Encumbrance Weights

Now the entire character sheet is populated with NO "XXX" fields in it!

PS: When editing a character, auto-calculated fields show as XX, but will calculate correctly when displayed.

Any issues, you know where I am (right here!)

[jasonbrisbane]

Wow, that was hard!

The initiative bug issue has now been fixed.. 

Lets hope it stays fixed!

[Widukind]

The HArp Online Character Sheet has now been updated to version 1.1.0.

Where is the link?

[Rasyr-Mjolnir]

The HArp Online Character Sheet has now been updated to version 1.1.0.

Where is the link?

http://harpcs.ironcrown.com/

[jasonbrisbane]

Hello All,
After a few experimental changes, I have added some extra functionality to the character sheets :more specifically to the printer versions.

You should now see that several areas include extra lines on the bottom of the areas that were blank:

    * equipment
    * linguistics
    * OB



And now Character Notes will allow you to save and display notes correctly (i.e. with carriage returns, etc). Please let me know if something does not work!

[enoch]

Hey Jason, I'm not sure if you're aware that the site is currently down. The exact message is:

"Due to technical issues, this website is temporarily offline.... Sorry for the inconvenience...."

[jasonbrisbane]

Thanks enoch.

Yes I changed that due to security issues. Still testing and trying not to break things further.

[jasonbrisbane]

As people are now aware of the change of Ownership of ICE, you may now realise why the website was down....

I am currently in negotiations to maintain copyright/ownership of my code....

[enoch]

Any news about bringing back your HARP & RM online character generators? I found them very useful and hope to be able to use them again. I'm not privy to the particulars, but I stand behind you (Jason) retaining copyright of your code. Best of luck.

[jasonbrisbane]

Thanks.

Juist waiting for db access and a ftp link to upload them.