I’ll be rolling out a security update today making sure no more security vulnerabilities remain. Also thanks to @wh0 for pointing out another problem in the DMs. All passwords will be encrypted and we’ll have random words for project names.
Random words as project names (also thanks to @javaarchive
Since passwords created before this update are not encrypted, login might fail. So, if you want, you can request to have your account deleted and you make a new one. When you make a new account, make sure to use the same username so that you get back your projects.
@ihack2712@EddiesTech@Anish@javaarchive@idodev@RiversideRocks@random and everyone else who has created an account on GPP (sorry for the mass mentioning) I’ve deleted all user accounts and projects as a safety measure, as a result of the implementation of the hashing and salting password protection. Kindly excuse me for the inconvenience.
@khalby786 the errors are:
Error: secret option required for sessions
at session (/rbd/pnpm-volume/5934a41f-ada9-4390-af69-85f10bd25889/node_modules/.registry.npmjs.org/express-session/1.17.1/node_modules/express-session/index.js:200:12)
at Layer.handle [as handle_request] (/rbd/pnpm-volume/5934a41f-ada9-4390-af69-85f10bd25889/node_modules/.registry.npmjs.org/express/4.17.1/node_modules/express/lib/router/layer.js:95:5)
at trim_prefix (/rbd/pnpm-volume/5934a41f-ada9-4390-af69-85f10bd25889/node_modules/.registry.npmjs.org/express/4.17.1/node_modules/express/lib/router/index.js:317:13)
at /rbd/pnpm-volume/5934a41f-ada9-4390-af69-85f10bd25889/node_modules/.registry.npmjs.org/express/4.17.1/node_modules/express/lib/router/index.js:284:7
at Function.process_params (/rbd/pnpm-volume/5934a41f-ada9-4390-af69-85f10bd25889/node_modules/.registry.npmjs.org/express/4.17.1/node_modules/express/lib/router/index.js:335:12)
at next (/rbd/pnpm-volume/5934a41f-ada9-4390-af69-85f10bd25889/node_modules/.registry.npmjs.org/express/4.17.1/node_modules/express/lib/router/index.js:275:10)
at SendStream.error (/rbd/pnpm-volume/5934a41f-ada9-4390-af69-85f10bd25889/node_modules/.registry.npmjs.org/serve-static/1.14.1/node_modules/serve-static/index.js:121:7)
at SendStream.emit (events.js:196:13)
at SendStream.error (/rbd/pnpm-volume/5934a41f-ada9-4390-af69-85f10bd25889/node_modules/.registry.npmjs.org/send/0.17.1/node_modules/send/index.js:270:17)
at SendStream.onStatError (/rbd/pnpm-volume/5934a41f-ada9-4390-af69-85f10bd25889/node_modules/.registry.npmjs.org/send/0.17.1/node_modules/send/index.js:421:12)
The session secret is a key used for signing and/or encrypting cookies set by the application to maintain session state. In practice, this is often what prevents users from pretending to be someone they’re not – ensuring that random person on the internet cannot access your application as an administrator.
This answer is from Google, because I didn’t know how to describe it.
It’s licensed under the MIT license and code reproduced from GPP should be in accordance with the license. Please read LICENSE.md before using GPP’s code in Kidz.
Somewhere at the top, there’s a statement defining two databases (I think the variable names are project and user). I’ve defined an SQLite database using Endb in those two statements. Those two statements create a SQLite database, refer to https://endb.js.org for using other types of databases such as MongoDB.
MongoDB is much better for people who have never used databases before. I started with MySQL/mysqli on PHP and then tried MongoDB on Javascript with Mongoose and it is much easier than doing all those silly queries and things. Totally recommend
I’ve now made GitHub oAuth as the primary login method to prevent account abuse and spam, as well as some UI fixes, especially for the editor, including a new status bar at the bottom. As a result of this, the login form no longer exists (no need for it, because we have GitHub login) and those who remix this app again will have to create an oAuth Application in their GitHub account and paste the client ID and client secret in the env. I’ll be updating the README soon for better remix instructions.
This is starting to look like something!! I’d still advise against that huge header, you should look into getting it to a sidebar! Good work @khalby786
If you click the “Save” icon on the top right, the code gets written into a folder and that code gets hosted, so basically you get instant hosting, if that’s what you meant.
Yes. Not a good idea, I know, and I’m currently looking for other options. But it doesn’t take too much of my space, somehow. I have around 50 folders right now, each containing an index.html, script.js and a style.js but so far it’s been only 4% of the disk.
XSS is not really the issue here though. Just make sure that your users don’t set cookies, because all other projects could potentionally fetch those cookies.
Also, continuing the discussion about databases we had earlier in this thread, @random had suggested MongoDB for “better security and easier UI”, I found Deta which has a more generous free tier than MongoDB.
Currently fixing bugs and at the same time adding new features, nobody use GlitchyPastePen right now as there are some EJS/server bugs I’m fixing right now. @random?
I’m very much pleased (and overjoyed) to inform you that the editor now has Intelligent code completion or IntelliSense or automatic code completion. Previously, we did add it to our Ace.js configuration, but because of not enabling “live code completion”, it did not work as we expected. Credit to @random for enabling and including the basic autocompletion plugin.
Are you facing this issue randomly or every time you login?
Are you still facing this issue?
Next time you encounter this error, kindly check the DevTools console and report here for any relevant errors.
I also believe this might be caused by the Github downtime which happened earlier today, nevertheless I will still be monitoring the logs by outputting it to a file so that I can inspect it.
As part of the friendly competition with @code-alt’s Blockly editor, I’ve updated GPP’s UI including a new theme for the editor. I’ve also added small new features, like a working DevTools for your browser (it works only in Chrome unfortunately), option to copy your code and show the live page in a new tab. And I’m loving SweetAlert2.
Do check it out and make sure to give me feedback, especially on stuff I can improve and how I could improve it.
Glitch reinstalling node_modules all the time has caused a lot of SQLite problems and our SQLite databases have been filled.
Good news: I’ll switch to MongoDB and everything will be good.
Bad news: the files related to projects created by you will still be present in the container but details like the names and respective owners might be lost.
Just to be clear: our SQLite databases do not store the contents of a project, they only store data like name of the project and the author.
My sincere apologies for such an inconvenience!
P. S.: This might take some while, I’m not at home
You can login and do all basic stuff, except for deleting projects, bug has been identified.
I wasn’t aware of such a limit, maybe there’s a file size limit for files created using fs. Also, projects made count towards to the Glitch container of 512 MB. So that limit is kinda useful.
I’ve made an important decision regarding this thread.
To prevent this thread from being really huge (and being “licked”) and to comply with Tasha’s recent post that service updates for a project shouldn’t be posted in the forum, all outages, scheduled maintenance and updates will be posted on our status page which is at https://glitchypastepen.statuspage.io.
Any new features for GPP will be added to the original post.
Here’s the plan: we continue saving files to the same container (until a really good idea comes up) but this time, a user has limits on the number of projects they can create. And @Assfugil is banned.
The “DevTools” in the GlitchyPastePen editor is actually an iframe of a remote debugging tool with the Chrome DevTools called Chii, which was set up on another Glitch project. For it to work, you need to add a script tag to your project:
And then when you click on the DevTools button and the iframe pops up, after the Waking Up screen, you should see your project’s URL listed there. Once you click on your project’s URL, you’ll get Chrome DevTools debugging tools for that website.
And this Chii tool has browser compatibility issues, although it’s a bit troublesome.
Also it would be quite nice to have html templates I actually hate writing html from scratch. Another nice thing would be something like vscode snippets where you can reuse stuff.
I’m also by habit a person who spams control+s a lot so can you possibly make that not download the page but instead save and deploy
Not exactly, I’m creating a forum because I am not (nor is anyone else) supposed to post updates, statuses, announcements, etc. in The Gallery. I thought that Tasha made that very very clear.
It does not mean that I am not competing against Learn Code
Lmao mobile issues.
I might use this for my repo https://github.com/CarlyRaeJepsenStan/vanillanimate… can you import from github?
Also please make it able to run inline css and js…
Edit. There are moments I love my Github profile picture.