LumberJocks Woodworking Forum banner

What Improvements Would You Like To See?

22K views 396 replies 158 participants last post by  woodbutcherbynight  
#1 · (Edited by Moderator)
I would love to hear your ideas on things we can do to improve LumberJocks.com for you.

What things do you love?

What things are you not so crazy about?

Are there features you would love to see added or fine-tuned?
 
#227 ·
When looking for an older post in a thread you have to click on "show previous 15 replies" . But you then have to go "downwards" in the thread to see those 15 posts. If you still need to see more old posts you go back "up" to get to the "show previous" button. It would be much better if after clicking the "show previous" button if you would continue going "up" to see the previous posts.
 
#228 · (Edited by Moderator)
I would be AGAINST a like button… What it would do is stop people from coomenting on projects in general, and just clicking the thumbs up button.

I think there is time to deactivate old accounts. you see a bunch of jocks with 1000+ day old accounts and never a post, response nor comment made.

A way to see who the New Jocks are (maybe I miss it)

A location. Not an address, but a way to e.g. find the Jocks in Kansas.
 
#230 ·
I forgot to add a very critical one…put a proper SSL certificate on the site!!! Anyone logging in at the moment is sending your password across the Internet in plaintext. For the non-techies, that means your password can be easily read by anyone who gets the message.

I for one, use a different password for LumberJocks than any of my other passwords.
 
#232 · (Edited by Moderator)
If the password is hidden on the login page, it doesn't mean that it is encrypted before it is transmitted from your browser to the server. SSL certificates are industry standard way to protect/encrypt communication between your browser and the web server via public key infrastructure. It also serves for the user to verify that the website/server they are connected to is in fact the website/server they mean to talk to. Without it, usernames and passwords are sent in plaintext. Encrypting passwords on the server/database back end…that's a whole other story that I'm not concerned with.

I'm in the IT field professionally and my intent isn't to kick off a debate about how to protect users, but just to pass along my observation. My local library system also has the same problem (no SSL) and I have yet to hear back from them about how they protect their users.
 
#233 ·
True, hidden passwords does not mean they are encrypted.

Not true that the SSL certificate encrypts the communication. SSL, or Secure Socket Layer, does not require a certificate to be functional. I have set up many, many secure websites without ever having installed a certificate. The connection is still secure/encrypted, but the visitor to that website will receive a warning that it may not be the webpage they think it is. The certificate is the assurance by the cert provider that the website is the actual site it claims to be. The private/public keys can only be used on that website, thus the assurance.

My webserver, for example, throws up a warning whenever to go to sign in. I disregard the warning because I know it's the correct website and I know that the information being passed is encrypted. If I went to an only store, for instance, that warning would tell me that it "might" not be the website I think it is, because they do not have the proper certificate.
 
#234 · (Edited by Moderator)
Tedster - It sounds like you're either self-signed certificates for the public/private keys. For a personal or limited audience server it's one thing, but for a "commercial" web server, an industry trusted CA really should be the way to go. And you are right that having a SSL certificate doesn't guarantee a forced encrypted session (or the level of encryption used in a given session). We could probably go on and on about it, but since neither of us are the ones who would be implementing the security, I think it's a bit too much of a tangent.

Bottom line - my recommendation is to put some level of communication in-transit encryption in place, so that passwords are less vulnerable.
 
#235 ·
G'day Cricket…..it may well be me….iI m IT barren…one of the responses I got from a How to Subscribe question suggested I contact you..also where do I find the members List..??

Regards….George
"G'day William….thank you for your prompt response. The problem I am having is that if i want to see as much as possible that has been featured on say Hollow Vessels [Hollow Forms, Closed Forms etc] how do I firstly list what has been featured up to now and then how do I add any future ones to my Watch List. The same goes for my other current interests Pendents, Rings, Writing Instruments…

Regards….George"
 
#237 ·
Paxorion, you are right :p What I took for an absence of any certificate is actually a self-signed certificate. I believe a secure connection can still be established without the cert, using only the public and private keys, but is very uncommon.

I sign into many websites which are not secured, such as this one, for which I have rather simple passwords compared to those I use for other sites. I actually have about 8 different passwords at different levels of complexity, the simplest ones for forums and such, a little more complex for email accounts (yahoo, msn, gmail) another step up for my websites (cPanel login) and my facebook account, and umteen digit hope I never forget them passwords for online banking and shopping. I pretty much expect forums to be insecure and I treat them accordingly.
 
#241 ·
Perhaps a refinement of the suggestion above on rotation of images: a way to rotate images. Auto rotation could hurt as well as help, eh?

+1 on refined searches.
 
#246 · (Edited by Moderator)
Here are a few more feature requests:

  1. Please add a Stack Exchange-style list of duplicate and related topics to the right of each post. A lot of modern websites will even start populating a "related topics" section on the right side as you start typing your question or forum post.
  2. Make it more obvious that you can link to a specific post. When I look at "#39 posted 43 days ago" it doesn't seem like there's a link anywhere. I have to hover over "#39" in order to get the link. (I was originally going to complain that there wasn't a way to link to a specific post, then I started hovering over every pixel of the post until I found it.)
  3. Ability to quickly and easily tag and upvote individual posts while reading, so others can later filter based on those. For example, I might want to view an old thread with dozens or hundreds of posts, but only show posts that have been tagged as "helpful" or I might want to sort the posts by "most helpful."
  4. Add a button in the "LumberJocks Pulse" box (on the homepage) that I can click to mark all as read.