At 5/29/07 11:33 AM, Casualty wrote:
THE DEPOSIT PROBLEM SHOULD BE FIXED! Thank you all for bringing this to my attention. My mistake was to set up a condition in which the experience difference had to be equal to 10 and not > than 10. So, should be fixed.
Ahhh.... so it was throwing amounts that were 10 off from depositing every day, such as that dude on the last page who had 60 exp in the week and was messed up? ... or something?
At 5/28/07 10:59 PM, gfoxcook wrote:
Quick question, though: What's to stop someone else from changing it to stop e-mailing the person on their login?Well... Weren't you the one who made me remove passwords? ;)
I didn't make you do anything, but yes, I was the one who pointed out that it would be better without passwords.
Still, there's nothing wrong with someone logging stats for another user, such as how people have logged Tom Fulp's stats (I doubt he's done it even once himself, yanno?), etc. etc.
All that does it put another NG user on the site. The only way I can think of someone "exploiting" it is to push someone else on NGlog down a spot by logging the data of an inactive user above them in exp or another stat or something.... just to be silly/vindictive.
But that isn't any REAL harm, and the worst you can do is put someone's rank down to their ACTUAL rank on NG, which is actually just ACCURACY, anyway. #;-}>
Or from changing the e-mail address to send the e-mail to them instead of to the rightful owner of the account?Nothing. I don't think people will try to irritate other people by using NG Log. I am assuming the users are mature enough to use the site as it has to be used. NG Log is not really the kind of site you'd use to create havoc, is it?
Or.... hell, speaking of that... what's to stop people who aren't the owner of an account from setting other peoples' accounts to e-mail only them all the time. Like, couldn't you go and just set the TomFulp account on NGlog to e-mail Denvish every time someone logs Tom's data, for instance?
Maybe not, but like I said, people do log stats for other people. I just think the e-mail system is bound to attract a few folks to be silly. I dunno how to address that and keep the system as long as, as you pointed out, there are no passwords, though.
I suppose that if there's a single IP that's done like 90% of the logging on a username, then only that IP could do the e-mail settings for that username? If that's workable, that would fix it better than a password could, even.
Too bad for teh AOL users and other dial-up folks, though.
But they could just... not be able to use the e-mail feature, I suppose.
If someone really has a problem, my email address is stipulated in each mail, so they can always reach me. I can turn off the feature for users if I want, or I could find any other system to stop that from happening. So if it ever happens, I'll be ready #;-}>
Ah, okay. Well... we'll see, I guess. I was just pointing out a potential thingie, I didn't say it's guaranteed to happen or anything. #;-}>