Start your own public tracker

rvt said:
Ruby on rails is like any framework, full of hype.
The language used is ruby, but using it on rails you're not really bothering with the language, you're relying on the framework to put your stuff together. That's like relying on a program to put your emails together for you, or a bot to make posts for you. It may be able to do it faster, but the results wont be as good.

Besides, it can easily be achieved on PHP with not much code. The first one took 6 hrs and the second one took just over a day to develop so there really is no point to using a framework which will bloat the thing and make it incompatible with most webservers (especially the free ones).

Another consideration is how much you would trust a big open project like ROR. Nearly every big web project I've ever seen has been hugely insecure on almost every level. Writing the code by hand, you can avoid a hell of a lot of problems.
Click to expand...


Ok, I'll take your word on it :D

I have yet to learn it. Perhaps in the coming month or so:01:
 
ermm doesn't look right, ok here's what happen
i deleted all the stuff i did before and start from the top and im doing this on my site.
after i did it here come the problem.

1st visit to the page
Error: No Torrent which is normal right?

then i went to admin page and logged in.. and the error poped up
bug1.jpg
bug1.jpg


i dont know what happened here.

then i tried to upload torrent
bug2.jpg
bug2.jpg


then i clicked upload and another error poped up
bug3.jpg
bug3.jpg


and im not sure by which directory you meant chmod. do i need to fix any codes or on the main site?
and should i 777 the folder which contain all the files or 777 only the files? if this is what u meant earlier
bug4.jpg
bug4.jpg
bug4.jpg

bug5.jpg

bug5.jpg
bug5.jpg

this may look different because im not using 100webspace.com
 
@spectator1: good spotting. Exactly the way I would fix it.
Every time I see that nick I think of bob, but I guess you were probably around for all those fun and games, you old fart :P

The next release will probably be nothing like the last one.
That one was a bit rushed and shoddy, this one is from ground up. It'll have a lot more features though.
It'll also more than likely be split into two branches, one for public and one for private.

To adress a couple of points raised by Lope333:
Captcha systems are designed as a way of determining whether the poster is human rather than spam prevention. A human could post 100 times a minute even with a captcha in place. If someone starts to bomb your forums with posts, I always see it as better to deal with that person rather than limit all your other users.

Requiring username and password for upload is a waste of time with this code really. The cookies are protected by having the IP address hashed into them, taking out a major source of account hacks. It still leaves 3 possibilities.
1) They know your password, in which case this will not stop them.
2) They are on your computer. This would stop them, but if they are using your computer they can more than likely bluff an admin into resetting their password. The next version will include a recovery script for passwords, which means they could do it without involving an admin.
3) Database hacks. Although I'm fairly confident there are no SQL holes, it's a remote possibility. If this happens though, there are bigger problems than torrents being uploaded. Even if we require a password, there is nothing to stop someone with database access from running a rainbow table attack.

The next version will tie uploaded torrents to specific users for the purposes of being able to edit. Code can either be modded in to do what you want, or I may include some of it by default. Either way, I'll throw in an anonymous box for uploads so they can keep their names from the top lists.

On the subject of ratios, it's something I'm debating. At revolt we don't use ratios for anything. It's a small place and we figure a user is worth more than a number. If I leave out ratios, it might encourage more sites to run a similar system and mark the code as being for smaller groups (mainly friends). It also removes the problem of ratio cheaters completely.
Lots of smaller, friendlier sites with lower operating costs is how I'd like to see the torrent scene go to make things harder on the mafiaa, but people will run the sites they want to run.

If I include ratios, it makes the site more durable for a range of uses, but still encourages ratio logging and leaves the problem of cheats.
If ratios are included, I cannot include any of the code I have written for detecting various cheat clients by name, as this would give the makers clues to improve their cheats. The best that could be included in a public release is a speed reporter, and this only catches the most stupid cheats rather than the worst ones.

I'm toying with various ideas to allow seedtime as a point system, but without some ratio inclusion that discriminates against seedboxes which seed to high ratios for a very short time.

Whatever happens, I'll be redoing the sysdev site to include some forums, so we should be able to at least have a mod section.

v2preview.jpg
 
Update: Just reloaded the 1.01 rar due to 100webspace having GPC switched on.
You can either grab the new set and reupload announce.php from it, or add the unesc function from ul.php to announce.php and apply unesc to both $ann['info_hash'] and $ann['peer_id'].
 
If you want a very easy, completely public tracker with nothing but announce:

announce.php
Code: 
[COLOR=#000000][COLOR=#0000bb]
[/COLOR][/COLOR]


Absolutely no support in there for NAT, ratios or scrape, but it works and should be fast as hell :P

If you want a full blown site, you'll need to wait a couple of months or grab tbdev.
 
RVT thank you so much, i finally manage to make it
work on another free host and it's just great!

very simple to use and manage, i love it!


few feedbacks for future updates:

* forum
* edit torrents option
* torrent name (right now displaying the file's name automaticly)
* small news box below the logo
* profile page

already waiting for further releases!
simply awesome!
 
thats awesome rvt.

you're right about the capcha thing. simply having a non-standard forum will prevent most automated spam bots.

i have a slightly different approach to security. if people cheat on my site and give themself an inflated ratio whether its for their ego or to leech, i dont care. most people are normal and wont go to such great lengths. if someone steals someone else's account i dont really care either. 99% of the time things will work as they are planned.

giving certain users special treatment was just an idea to encourage uploading, but not important.

a good way for rewarding users with privelages (which is hard to hack) is counting the number of different users download torrents that they have created.
(but i'm not sure how to determine whether downloaders are unique without storing IPs)

the main thing that i see as being important is being able to know that a certain alias uploaded a certain torrent, which gives it *some* authenticity. (more than none)

and if peoples passwords get hacked they can recover them with an email link and then make their password more secure.
the system should probably store failed login attempt IPs for a certain period of time, and then block that user from making too many attempts.

another idea for killing forum spam is giving users with more than x posts on the site the ability to mark a post as spam, and if 3 of them do that, it will get moved to a spam section where the mods can review it.
 
Back
Top