Website News

[Jebbs]

Hey everyone,

Just wanted to announce that the website will most likely not be ready in time for the jam. This is due to a lot of personal stuff, mainly me going back to school full time and I just don't have enough time to get all that I want done and still have enough time for work and school. Sorry guys, I'm just feeling a bit overloaded right now.

So, in light of this news I will be opening up another theme submission thread today so we can get that going and start deciding a theme for the jam.

Hope I didn't let to many of you down.

[Lo-X]

No problem, we can still use the forum till the next time, don't think Laurent will mind =)

Anyway, do you need help with the website ? I don't have a lot of time too, but I think we have some/much skill into website making around here.

[zsbzsb]

Anyway, do you need help with the website ? I don't have a lot of time too, but I think we have some/much skill into website making around here.

Jebbs already hired me out 

I will have enough done in time... (just cross your fingers  )

[Jebbs]

Yes!

Almost as soon as I made my original post, zsbzsb set me a message and has since taken the lead on the site.

Looks like we might be in luck after all!

[zsbzsb]

Site is coming along well, I have a good feeling after only ~6 hours of work. 

[Mercy404]

Awesome, thanks zsbzsb!

[zsbzsb]

Website is up!!!

http://sfmlgamejam.com/

I am currently working to enable theme suggestions (for voting on later)  - Done, go and give us theme ideas 

But for now go ahead and register and let me know if you have any feedback.

(to Jebbs, I am sincerely sorry for trashing what you already did  )

[Lo-X]

Good job

Are passwords encrypted ?

[zsbzsb]

Submission of theme ideas are now active!

Login and give me and Jebbs upto 2 themes to consider for the upcoming jam!

Are passwords encrypted ?

Passwords are stored in the database with a SHA512 hash. 

[Lo-X]

Passwords are stored in the database with a SHA512 hash. 

Hmmm... well... hm... Ok, I think it'll do it :p

I did my suggestion work. Well, the first things I manage to find without much thinking.
Well done !

Edit: could be nice to put the next jam date on the home page
Edit2: a countdown would be even better

[thomas9459]

Passwords are stored in the database with a SHA512 hash. 

Hmmm... well... hm... Ok, I think it'll do it :p

Are they salted?

[zsbzsb]

Edit: could be nice to put the next jam date on the home page
Edit2: a countdown would be even better

It is planned, considering all my work so far was to get the website into a usable format stuff like this took a back seat. Something like this should be done shortly 

Are they salted?

How the heck did I know this was coming Alright, true story is that I was half asleep when I did the register/login session part of the site. So I simply forgot to add a salt (yes you can come beat me now iostream  ), but to be honest this really only leaves the database passwords open to rainbow table attacks (provided you get your hands on the database).

Now I'm not too concerned over anything happening since I use SHA512 (lots of websites still use MD5 and SHA512 will take ages longer than MD5 to breach), however in the future (not a priority at the moment) I may do a password wipe so that all new passwords will be salted. 

Edit

Salting has been added. All new accounts will automatically receive a salt while current accounts will be updated on next login 

[Nexus]

Since it's HTTP and not HTTPS, one can still eavesdrop when registering and re-authenticate with the harvested credentials (even if only the password hash is transmitted)

No, I don't want to annoy you, thanks a lot for the effort! The game jam is going to be great with a dedicated site

[zsbzsb]

Since it's HTTP and not HTTPS, one can still eavesdrop when registering and re-authenticate with the harvested credentials (even if only the password hash is transmitted)

This is true for any website not using HTTPS, even these SFML forums are open to man in the middle attacks. However the main issue here is that I don't have a salt for passwords 

No, I don't want to annoy you, thanks a lot for the effort! The game jam is going to be great with a dedicated site 

This isn't annoying in the least, I hope you will participate in the jam!


And so everyone knows, the full website code is available here.