Recent content by Eris Greyrat

Here, ChatGPT helped a researcher find a PHP vulnerability and patch it

Quite often. These were real users signing up with Google, GitHub, and X on my live site, not something I forced. I only reproduced it on my test site to find the cause. After I applied the change above, the errors stopped.

Yes, I see it. If the name already belongs to an older account, the form rejects it fine. The errors I got are from a different case. Two people (or the same person in two tabs) register the same new username at the same time. Both requests pass the username check, because neither one can see...

I disagree with leaving this behaviour as it is. It is inconsistent: images open in a lightbox, while video attachments open a new tab, even though Media Gallery supports video lightboxes. Please add a UserCP or AdminCP option to choose whether video attachments open in a new tab or play in a...

@Chris D, I am gonna be honest, this author hasn't been active or responded for 3 years. What is XF Bug Bot going to do unless the author is not answering?

Confirmed on my side, thanks. The cause is the unclosed <script> tag: the HTML parser treats everything up to the next </script> as script text. A closed tag renders fine. Agreed, this is as designed because the core explanations rely on raw HTML. Using &lt;script&gt; is the correct way to show...

I couldn't figure this out until now. Thank you!

No, all of users are still marked with Display user as staff

The notable members page under Members > Staff members (members/?key=staff_members) shows 20 users. The moderator list in the admin control panel (admin.php?moderators/) shows 24. Both lists should reflect the same staff team, so I suppose I would expect the counts to match. Go to...

Oh AI XF? This is the same issue applied to all GitHub, Google, and X (Twitter) Server error log XF\Db\DuplicateKeyException: MySQL query error [1062]: Duplicate entry 'huyanluanyu' for key 'username' src/XF/Db/AbstractStatement.php:225 Generated by: Unknown account Oct 7, 2026 at 08:16...

@Siropu, if I upload GIF, WebP, PNG, or JPG. They're working to be fine with good pixels, and if I upload an MP4, it will be large on AdminCP at Ads Manager > Edit ad (Banner). The same as the dashboard / home page has an issue too. Also, if you put a link at the target URL, the video cannot...

Share what anime you are currently watching! Tell me the anime title and which episode you are on, and share your opinion here. I am currently watching Your Forma, Episode 4. It's good.

Parental controls with a passcode already exist on iOS, Android, and PC, and they help when parents actually set them up. Why would the government have to control for verifying age verification, and your data will be sent to a datacenter and get breached, and it's over. A parent has to do a job...

If they do, then it will have heavy backlash serious and everyone will never do verify age verification. If Microsoft keeps doing crap. Everyone will find a way to bypass or switch to third party windows OS / Linux OS than a official OS

This is worse from 1984 predicted because it doesn't protect children, but they just control everything, and store your data, also a hacker will attack and breach data. I will just block the UK country on my site if the UK government decides to threaten my site.