Technical Support

• R

  Modify /login endpoints to avoid DDOS and dictionary attacks
  • rdomzim  

  2
  0
  Votes
  2
  Posts
  5
  Views

  

  @rdomzim Not easily, as /login is hardcoded in a couple places in the codebase. To combat these types of attacks, we introduce a delay when logging in that somewhat matches the bcrypt runtime. You could always edit the codebase to increase the delay some more, but what I'd recommend is setting up spam-be-gone so these requests are curbed before it hits bcrypt. Yes. bcrypt is processor intensive by design (that's what makes it so good as a password hashing algorithm, but I am no expert).
• 

  change http to https but cannot login
  • Peter Dong  

  11
  0
  Votes
  11
  Posts
  53
  Views

  

  The problem already solve thankyou for all the help. It works when u rewrite the the http rq to https.
• 易

  I want to show only the widgets that have a link to the homepage. What should I do?
  • 易学教程  

  1
  0
  Votes
  1
  Posts
  11
  Views

  易

  I want to show only the widgets that have a link to the homepage. What should I do?
• 易

  node process CPU usage rises to 100
  • 易学教程  

  6
  0
  Votes
  6
  Posts
  59
  Views

  易

  I put the code of an old station in the past, with the data of the new station, there is no problem So I wonder if there's something wrong with the code, or is it a plug-in?
• R

  Executing synchronous tasks upon exit/shutdown
  • rdomzim  

  4
  0
  Votes
  4
  Posts
  18
  Views

  

  I think a better option is to save portions of the cache periodically or as they are created. Then if your server crashes or is killed you still get to keep it. You could additionally use the database to persist the cache which would be more lightweight.
• 

  Support for docker / docker-compose and out-of-date documentation
  • wakecoder  

  13
  1
  Votes
  13
  Posts
  108
  Views

  E

  Forget it buddy. I think your reading skills a flawed. As i said before i dont have problems with my containers. The official NodeBB docker container does not adhere to essential docker rules, which are: do not mess with persistant data. But i doubt you are able to grasp that. Lets leave it here.
• 

  Category Privileges PUT and DELETE APIs Results Not Reflected
  • Ethan Yu  

  2
  0
  Votes
  2
  Posts
  12
  Views

  

  Looks OK to me did you put a console.log here to see if the groups and privileges are correct? Did you check the database directly to see if the change happened?
• 

  Private (profile image) uploads
  • yusf  

  1
  0
  Votes
  1
  Posts
  13
  Views

  

  When I enable the setting Make uploaded files private I expect profile images to go private as well, but it does not. I've tried to reupload avatars to check if the setting would apply to new uploads only, but there's no difference. How do I make profile images accessibly to logged in users only?
• I

  Make codes LTR in RTL forums
  • inna  

  2
  0
  Votes
  2
  Posts
  32
  Views

  I

  Hello, Any comments or suggestion or any future updates?
• 

  UNSOLVED SSO google- no icon @login page?
  • 巫易澄  

  5
  1
  Votes
  5
  Posts
  53
  Views

  

  @oplik0 Hi，Thanks for your replay，I would like to ask if I need to type some Html code in the [interface] -- [custom code] in acp to invoke this nodebb-plugin-sso-google plugin？And now I just typed Client ID and secret in nodebb-plugin-sso-google. Do I need to adjust some configuration in library.js?
• J

  nodebb-plugin-composer-quill: WYSIWYG alternative to redactor
  • JJSagan  

  65
  1
  Votes
  65
  Posts
  4072
  Views

  

  @Per0x I had the same issue, I just went to nodebb/node_modules/nodebb-plugin-composer-quill and I executed npm i there. I imagine this is not the best solution, I could make it work. I hope it can help you.
• D

  Setting the language - server-side / client-side
  • danlong  

  7
  0
  Votes
  7
  Posts
  32
  Views

  D

  @PitaJ I think I have a very edge-case scenario, I've found a solution for guests and logged in users. Thanks for your help and point in the right direction!
• 

  Bulk "unsubscribe" emails
  • djensen47  

  7
  0
  Votes
  7
  Posts
  37
  Views

  

  @julian As a followup, I received an email from Postmark. They basically told me that they prefer that customers manage their own lists. They're a transnational email provider not a service to maintain lists. I'm with them on this. It's the responsibility of the owner of the list to maintain the list. Right now NodeBB punts that to the email provider.
• F

  non-english url slug
  • fstdesk  

  2
  0
  Votes
  2
  Posts
  15
  Views

  

  This isn't an option at the moment. Why do you want to do this?
• 

  ERROR invalid-event
  • y h  

  11
  0
  Votes
  11
  Posts
  61
  Views

  

  plugins.browsingUsers
• 

  error: /logout invalid csrf token [use ssl, nginx, master branch]
  • Aqua  

  10
  0
  Votes
  10
  Posts
  2237
  Views

  

  @KevinPan your problem is not exactly the same, because according to your reply over there, you're using IIS not nginx. I don't know how to use IIS (don't know if any one else here who does) but you'll need to set the same headers that we do in the example nginx file: https://docs.nodebb.org/configuring/proxies/nginx/#basic-setup
• 

  Double URL problem after login | https in config.json gives session error
  • MJ  

  19
  1
  Votes
  19
  Posts
  236
  Views

  K

  I have deployed NodeBB via Windows IIS (IIS Node), and I have met the same problem, how can I hot fix this issue.
• 

  Password will not save between user side and admin area.
  • emcca  

  1
  0
  Votes
  1
  Posts
  5
  Views

  

  I am using Heroku to host a nodeBB instance. When using the heroku supplied subdomain (and setting it in the config.json), everything works fine. I can log in as admin account, use admin GUI, and everything works well. When I set up custom domain (.me tld if that matters), configure it in Heroku, config.json, and DNS, I can get to the site, log in, but when I try to go to the admin area, it asks me to sign in. Once I sign in, it brings me back to the homepage (not admin GUI). I am using cloudflare for DNS and have tried with no plugins, vanilla install. I am using redis. I have tried both proxying through cloudflare "orange cloud" and not proxying "grey cloud" record. Any ideas?
• W

  Apache + nginx SSL config for csrf token
  • windkomo  

  10
  1
  Votes
  10
  Posts
  3795
  Views

  K

  I have the same problem, I host the NodeBB with IIS (IIS Node)
• 

  Notification email does not display correctly
  • seadog  

  3
  0
  Votes
  3
  Posts
  14
  Views

  

  I am running Nodebb v.1.12.2.