Changelog: HPC:Factor Site, Engines & Modules

Changes for June 2022

2022-06-06
- Mimas: Image uploads from the editor were not being copied into the correct repository location and as such were returning 404's
- Mimas: Additional HTML Entity additions as required by porting

2022-06-09
- Forums: Added client-side automatic linking of @ mentions to the users forum profile. Unfortunately it will only work for usernames that do not contain a space.

2022-06-10
- Forums: Modified client-side script for automatic @ mentions as its use of innerHTML was breaking Marbl and other server-side code injection
- Forums: Improved automatic @ mention code to parse multiple @ usernames mentions found on the same line

2022-06-16
- Forums: Fixed loophole in forums get-photo provider that allowed an exploiter to force an error output

Changes for August 2022

2022-08-17
- D&S: Resolved issue where-by encoded HTML was being printed in free-form text fields
- D&S: Hardened string sanitisation using Mimas sanitisation functions
- D&S: Set all devices in the database to 'discontinued'
- D&S: Cleaned up character set encoding corruption where noticed in the database from copy/pastes

2022-08-18
- D&S: Restored missing CPU information to listings which were all showing blank
- D&S: Added Supported Architectures readout to the specification and comparison grids
- DLC: Modernised and simplified schema labels for relations
- DLC: Deleted legacy, unused and transient fields left over from historic data migrations

2022-08-28
- HCL: Removed the featured device sidebar widget at is served no real beneficial purpose
- HCL: Removed featured device from the HCL home page
- HCL: Removed the submit your hardware image in favour of a banner
- HCL: Reduced the height of and further simplified the HCL home page

Changes for September 2022

2022-09-07
- DLC: Fixed broken thumbnail image on DLC pages for 'Host Application' and 'ISO' file types

2022-09-08
- D&S: Fixed bug that was causing thin client devices not to show on the H/PC's by thumbnail page
- D&S: Added GPS / Sat Nav category to D&S
- Search: Modified the search algorithm to try and bring more accurate title hits higher up the search results

2022-09-09
- HCL: Simplified code and eliminated the three page structure for HCL Submissions

Changes for October 2022

2022-10-05
- H/PC:Update: Fixed missing line breaks on download descriptions
- News: Fixed 404ing old news links due to missing URL Rewrite catch-rule
- SCL: Altered search engine product info to exclude prices for free software

2022-10-07
- Forums: Improved back-end code logic for Your Settings page handling and eliminated use of magic numbers
- Forums: Re-wrote change password algorithm to swap users over to SHA256 and eliminate bug-ridden and insecure PD9 algorithm
- Forums: New user accounts will no longer be redirected to an error on the email verification page after creating their account

2022-10-08
- Forums: [Bug fix] The Your Profile > Change your Password page was erroring due to a stray character
- Forums: New UI on Edit Profile to manage communication types and social media links
- Forums: Updated the Forum Profile/Register countries list and moved the data set into the database instead of copied around the source code using https://en.wikipedia.org/wiki/List_of_sovereign_states as the source
- Forums: New profile page layout for contact and social media links using 'Get in-touch' buttons
- Forums: Your Settings interface change for 'Get in-touch' fields
- Forums: Changed database schema to use normalised relation for storing 'Get in-touch' entries
- Forums: Migrated existing database fields to new schema location
- Forums: Deleted old AIM, Yahoo IM and MSN Messenger user account data from the new relation in the database
- Forums: Removed AIM, Yahoo, MSN, ICQ, Skype, LinkedIn, Twitter, FaceBook hard coded fields from the members relation
- Forums: Modified new user creation pages to support new contact/social media types
- The site is 164,645 code lines

2022-10-09
- Forums: Added latest posts to user profile
- Forums: Merged Staff Profile data into forum Profile
- Forums: Refreshed forum profile UI
- Forums: Further clean-up of user social media and website links as well as hardening of the parser algorithms
- Staff: Deleted separate staff profile pages

2022-10-10
- HCL: Links to suggest an edit to a HCD were not auto-populating the existing compatibility data
- SCL: Added robot disallow to the search page
- News: Fixed very old links that were causing a conflict with Mimas and routing to a 404
- News: News Calendar page now only shows months where there were news posts made
- Forums: Implemented mandatory password reset at sign-in for legacy password users
- Core: Implemented mandatory password reset at sign-in for legacy password users

2022-10-11
- CAB Maker: Added 'Clear Files' button to clear all files without resetting the entire UI
- Forums: [Bug Fix] Profile latest post readout was displaying thread titles from the moderators forum

2022-10-12
- CAB Maker: Default export file names will now use the a friendly CPU identifier instead of the numeric CPUID

2022-10-13
- Forums: Forum pagination was not printing correctly on forums with less than 6 pages of threads


2022-10-21
- SCL: Hovering the mouse over the download type icons on the downloads page now gives a tool tip for the meaning of each icon

2022-10-28
- Core: Updated Elara FileUploader 3.3.2 and dependencies

2022-10-29
- CAB Maker: Updated Elara FileUploader 3.3.2 and dependencies
- Core: Implemented REST API to search for member usernames

Changes for November 2022

2022-11-01
- Forums: Improved sanitisation and parsing of contact and social media data added to profiles
- Forums: Performed manual sanitisation on links to contact details stored in the database to remove fakes and junk

2022-11-04
- Forums: Removed some cookies
- DLC: It is no longer possible to download files without being logged-in (regardless of file size)
- DLC: Removed backdoor that could be used to download files without an appropriate account status
- DLC: Converted downloads to use stream downloads as used by H/PC:Update
- SCL: Merged validation and download algorithm with the DLC via DlcHelper
- SCL: Converted downloads to use stream downloads as used by H/PC:Update
- H/PC:Update: Merged validation and download algorithm with the DLC via DlcHelper

2022-11-08
- Forums: Refreshed the UI on the search page
- Forums: Removed code to display separate forum and main search pages so that they only display the main search UI
- CAB Maker: Converted the CAB download link into a button that enables once a CAB is available, making it more consistent with the UI.
- CAB Maker: Once the CAB has been built, the name of the last generated CAB filename and the date/time of the last build is now written to the UI.
- CAB Maker: Modified the build status poll to return the CAB filename if the build has completed successfully
- CAB Maker: Renamed 'Start Over' button to 'Start New Project'
- CAB Maker: Moved the 'Start New Project' and 'Delete Files & Logout' buttons to the right hand side of the UI to make it harder to accidentally press them mid-projects
- CAB Maker: Removed code and imports necessary to support the broken forum MD5 hash algorithm

2022-11-09
- Forums: [Bug Fix] Administrative impersonation was not working with accounts running on new password hashes

2022-11-10
- Forums: Further improvements to the search page UI
- Forums: Converted the Filter by author text box to use the new user search REST API
- Forums: Converted the become a HPC:Factor Member donation buttons on the Your Settings page to be browser responsive

2022-11-11
- Forums: Converted the ignore user search text box to use the new user search REST API
- Forums: Converted the create new PM user search text box to use the new user search REST API
- Forums: Converted the create group editor user search text box to use the new user search REST API
- Forums: Converted the create group manager user search text box to use the new user search REST API
- Forums: Converted the flood control user search text box to use the new user search REST API
- Forums: Converted the IP Check Tool user search text box to use the new user search REST API
- Forums: Converted the Broadcast Messages group search text box to use the new user search REST API
- Forums: [Bug Fix] Fixed non-working flood control admin UI functionality
- Forums: Added group search REST API
- Forums: Deleted legacy user search control and JavaScript
- Forums: Cleaned up redundant and unnecessary code and files
- The site is 164,755 code lines

2022-11-29
- Forums: Removed old theme selection code
- Forums: Removed deprecated experimental Quick Login code
- Forums: Removed member_services relation from the database and merged remaining fields into the members relation
- Forums: Removed board setting to allow or deny the viewing of Forum signatures on Windows CE devices
- Core: Removed deleted theme, canvas mode HCL EULA and Quick Login code from the kernel
- Core: Added initial beta support for switching between Light and Dark mode User Interfaces

Changes for December 2022

2022-12-01
- Forums: CSS improvements for dark mode support
- Forums: Your Settings updates to support Dark mode in the cookie session

2022-12-02
- H/PC:Update: Made the UI compatible with Dark mode

2022-12-06
- UI: Clean-up the main style sheet and synced light and dark back together
- Directory: Made the UI compatible with Dark mode
- HCL: Made the UI compatible with Dark mode
- HCL: Normalised use of fonts to cascade from the main CSS instead of imposing its own legacy styling standards
- HCL: Simplified UI elements, converted HTML tables to div structures, removed image elements in favour of HTML constructs
- HCL: Re-ordered the search page header to simplify the code

2022-12-07
- SCL: Made the UI compatible with Dark mode
- SCL: Re-organised the SCL homepage, converted HTML tables into div structures and increased the number of randomly displayed apps from 1 to 3, removing the duplicate featured application from the side bar
- SCL: Removed the latest updates readout and replaced it with a list of the latest comments
- SCL: Added app version to SCL latest comments list
- SCL: Replaced the latest comments side-bar navigation widget with top rated apps
- SCL: Renamed SclCommentsNavigationWidget > SclTopRatedNavigationWidget
- Mimas: Resolved known issues in Mimas content allowing the CMS to have better support for dark mode

2022-12-08
- SCL: Solved homepage alignment overflow issues on mobile devices
- SCL: [Bug Fix] Side-bar featured item would periodically get stuck loading a blank image and no text data

2022-12-09
- News: Made the UI compatible with Dark mode

2022-12-12
- Forums: Added m.youtube.com URL's to the forum BBS parser logic for YouTube videos

2022-12-20
- SCL: Updated the random apps row to use full screenshot images instead of their thumbnails, allowing them to stretch to the full width of the container
- SCL: Updated model class interface specification to current Elara 18 recommendations
- HCL: Updated model class interface specification to current Elara 18 recommendations
- HCL: Restored missing eBay UK referral links
- D&S: Restored missing eBay UK referral links
- Marbl: Updated to 0.9.15

2022-12-21
- D&S: Updated model class interface specification to current Elara 18 recommendations
- H/PC:Update: Updated model class interface specification to current Elara 18 recommendations
- Directory: Updated model class interface specification to current Elara 18 recommendations
- DLC: Updated model class interface specification to current Elara 18 recommendations


2022-12-22
- SCL: Removed the filtering from the SCL category view and added a new client-side compatibility highlight script that uses user device votes, CE version/CAB architecture and file processor architecture/minimum/maximum CE version to ascertain device compatibility for an given app.
- D&S: Improved UI in dark mode

2022-12-25
- Forums: Added a noformat tag to the BBS Code engine along with modifications to allow it to pre-parse noformat code to protect it from the MBBS processor. NoFormat can be used with or without the code tag. NoFormat itself does not format text as code. Where used with the code tag, the code tag should fall outside of the noformat tag e.g. [ code][ noformat]text here[/ noformat][/ code]
- Directory: Classified select box code for Directory Categories
- Directory: Fixed error on directory link submit

2022-12-27
- H/PC:Update: Removed the detail page and pup-up code in favour of a new REST call
- H/PC:Update: Added central REST branch for H/PC:Update

2022-12-29
- Forums: Modified the forum auto attachment render code to automatically display jpeg files and webp files
- Forums: Logon now sets the dark/light mode in the cookie
- Forums: Log-off now clears the UI mode cookie
- Forums: Edited logoff code to use HttpCookie
- SCL: Removed domain path parameter from the referrer cookie
- Elara: HttpCookie 1.0.4
- DLC: DLC 'Top Downloads' side navigation widget was linking to DLC records for SCL apps. It now links to the SCL for SCL content and the DLC for DLC content

2022-12-31
- H/PC:Update: Classified the existing JavaScript API
- The site is 148,070 code lines (On 31/12/2021 it was 236,719, 88,649 fewer lines!)

Changes for January 2023

2023-01-07
- QLink: Code optimisations for the redirector

2023-01-08
- DLC: [Bug Fix] Fixed typo error on lookup indexes that was causing the download validation status to always return true for certain users even if their accounts did not qualify
- Navigation Widgets: Simplified class naming and deleted unused widgets from the repository

2023-01-09
- Forums: Removed all MSIE ActiveX spell checker code as well as the ActiveX CAB installers
- The site is 147,279 code lines

2023-01-10
- Forums: Code cleaning
- The site is 146,657 code lines

2023-01-11
- H/PC:Update: Moved admin ComboBox functions into the models for WindowsCeVersion and HandheldPc
- H/PC:Update: Replaced local ComboBox generator code with versions from the models
- H/PC:Update: Replaced tick/cross icons with Unicode emoji's as the existing GIF's were not dark mode compatible
- Forums: [Bug Fix] Data type mismatch between MSSQL Server and the forums date parser could allow for an out of range date to be specified by the user
- The site is 146,662 code lines

2023-01-12
- DLC: Updated Donat to Download code as it still persists in occasionally failing to log the donation request
- Forums: [Bug Fix] Guest posters attempting to preview a thread were being presented with a crash error due to an unchecked path through code allowing a duplicate key to be formed
- Forums: [Bug Fix] Guest posters attempting to create a new thread and preview it before posting were unable to post as the ReCaptcha was not drawn to the preview form
- Forums: Removed legacy verification image code

2023-01-13
- Forums: Added querystring version to the Census H/PC:Update helper import as some users were still seeing the old cache version which was causing the add device form not to load

2023-01-14
- HCL: Restored protections to prevent non-registered users voting and setting device compatibility
- HCL: Protections against invalid numeric values being passed to public I/O functions
- Search: [Bug Fix] It was possible to generate an index crash if the last +quoted element in the search query has non material after it without a space e.g. +"xxx"yyy

2023-01-15
- Directory: [Bug Fix] Corrected crash due to malformed parameter
- SCL: [Bug Fix] Corrected crash due to malformed parameter
- SCL: [Bug Fix] Clear Filter button was not resetting the cookie
- Forums: [Bug Fix] Corrected crash due to malformed parameter in thread-post
- Forums: [Bug Fix] Corrected crash due to malformed cookie parameter in main include SetupDatabase UpdateLocation hook

2023-01-17
- Core: Updated error trap to prevent logging of error 0 phantom errors

2023-01-20
- SCL: Fixed missing include on the categories view, which caused an error if the SCL caches had recycled and a call to the categories page was made before the index page

2023-01-21
- CABMaker: Added attempt to protect the service from malware being uploaded and causing a process deadlock on the service

2023-01-25
- CABMaker: Added the interface controls to modify CAB Copy Flags (File Copy & Overwrite Options)
- CABMaker: Updated backend code to listen for user overridden copy flags
- CABMaker: Added logic to overcome the use of Long Bit 31 copy flag settings for creating references to shared DLL's
- CABMaker: [Bug Fix] You couldn't add a % character as a value in a registry REG_SZ

2023-01-26
- CABMaker: [Bug Fix] 486 processor type was entered as 468 in a resource file, causing 486 CABs to be listed as unknown type
- CABMaker: [Bug Fix] A CAB with a registry section and DLL self registration could drop both sections due to the absence of a link break in the processed INF file under some circumstances
- CABMaker: Iteration of Register DLL state for uploaded files was creating a jagged array map between the file and its register state due to HTML checkbox sending blank if unchecked. Converted the checkbox into a custom control with a hidden form field
- CABMaker: Ensured that all file and registry names/values and sources in the processed INF file are encapsulated in quotation marks to prevent issues with filenames containing spaces

2023-01-27
- CABMaker: Updated FileUploader 3.3.3
- CABMaker: Updated ByteStingStream 1.0.2

2023-01-31
- CABMaker: [Bug Fix] Base directory strings were not working correctly
- CABMaker: [Bug Fix] File copies to the root of the file system would cause an error message
- Elara: JsonClass 1.1.2

Changes for February 2023

2023-02-02
- Forums: [Bug Fix] PD9's file upload code was placing stray 0 value data at the end of certain files, presumably because of a file boundary issue. This was causing hash differences for uploads and files that were sensitive to file system boundary issues (such as CAB files) could corrupt if they straddled the boundary. Replaced the main forum upload code with the standard Elara FileUploader used on the rest of the site and modified the forum upload code accordingly.
- Forums: Replaced PD9's forum upload code on the profile avatar and photo uploader

2023-02-03
- CAB Maker: Registry values with elements wrapped in quotes are now properly escaped
- CAB Maker: Restored the ability to use %InstallDir%, %AppName% or %CE#% Macros in Registry values

2023-02-04
- DLC: Updated the DLC handling for Subscriber only downloads and properly codified definitions over hidden (invisible to guests), disabled (invisible to all) and subscriber only (visible but requires subscription to download)
- DLC: DLC no longer generates so called "soft 404's" for disabled content. All disabled downloads are invisible, including to bots
- SCL: Changed semantics for MembersOnly to IsHidden (invisible to guests)

2023-02-05
- DLC: Added developer name and installation instructions fields to the DLC details page
- DLC: Expanded DownloadItem with DeveloperId, IsObtainableFromDeveloper flag, LicenseId, LicenseTerms, InstallationInstructions, ViewCount, IsLocked, toString() & refactored the class
- Directory: Modified get links by category to support passing multiple categories as an array parameter

2023-02-06
- DLC: Eliminated unnecessary database call to seek download language information if the key is null
- DLC: Downloads groups now carry a flag to indicate whether they have file attachment, rather than performing a count each time
- DLC: Added Group ID's for all SCL Apps that had null DLC entries
- DLC: Created a new Super Class for aggregating DLC and SCL joins onto the UI
- SCL: Re-keyed Application Comments to use the DLC Group ID

2023-02-07
- DLC: Updated DLC base entity class to support merged data constructs from the SCL
- DLC: Updated SCL ApplicationComment base class to support new database architecture, renamed DownloadComment and migrated into the DLC namespace
- DLC: Set the DLC API as primary in deleting SCL records
- DLC: Removed DLC sync code from SCL base application class
- SCL: Removed duplicated values from SCL CRUD I/O
- Forums: Updated forum profile YouTube links to use the new channel link URL format

2023-02-09
- DLC: DLC Version 1.6.0
- SCL: SCL Version 1.2.0
- DLC: Comment support added to the engine
- DLC: Language metadata moved to the file level from the download level and files now support multiple language tags on one file
- DLC: SCL & DLC now both support structured system requirements and installation instructions sections

2023-02-10
- DLC: Added SCL and DLC link macros to Description, System Requirements and Installation Instructions fields
- Forums: Fixed issue if hacker attempted to inject a out of scope year into the forum filter cookie, which would cause a crash message for the hacker
- Forums: Added a UI response message when clicking to copy the current post URI
- Search: [Bug Fix] Underlying SQL query for page content search was searching for literal substitution placeholders ({R:1}) instead of the substitution values in the aggregate search
- Search: Tag search was not returning lookups for n tags in an AND grouped query

2023-02-12
- Forums: Modified the forum uploader to store the MIME type from the upload process instead of trying to look it up from an ever expanding long list
- Forums: Modified attachment uploader to store the MIME type
- Forums: [DB] Added mimetype field to attachments
- SCL: Added language display for files on the downloads tab
- SCL: Simplified the code on the downloads tab to eliminate the different UI for guests

2023-02-13
- DLC: Un-hid all invisible apps
- DLC: Simplified code for regenerating Canonical URL's so that it can be run externally without manipulating the last updated date time
- SCL: Un-hid all invisible apps
- SCL: Simplified code for regenerating Canonical URL's so that it can be run externally without manipulating the last updated date time
- SCL: Purged SoftwareApplication of all redundant code

2023-02-14
- DLC: [dB] Extended download and file relations to include groupVisibility, downloadTabVisibility and fileVisibility

2023-02-15
- DLC: Implemented DownloadEntitlement class on all DLC/SCL and search models
- DLC: [dB] Removed visibility bit flags from downloads and files relations and updated models
- Core: Replaced all EUD references with ISO 4217 EUR
- Mimas: Replaced all EUD references with ISO 4217 EUR

2023-02-17
- DLC: [dB] Removed field prefixes from recent engineering works
- Search: Download search now searches for developer name
- Search: Added admin search mode
- HCL: [Bug Fix] Some driver links were not displaying under some circumstances, even though they existed in the database
- HCL: Driver section can now show More Info links and links to DLC download pages as well as just file links

2023-02-18
- SCL: Newest Addition readout is now cached instead of live queried
- SCL: [Bug Fix] SCL searches for developer were returning the entire database
- CESD: [Bug Fix] Links on the support homepage were appearing with HTML encoded entities in the URL

2023-02-21
- Core: Added SystemNotification
- Forum: [dB] systemNotification relation

2023-02-22
- Forum: After 19 years I noticed that the forum quote BBS markup when clicking on the quote button doesn't actually wrap the quotation citation in the citation field, but on the first line of the wrapped quote
- HCL: Added reply support to HCL comments

2023-02-23
- DLC: [Bug Fix] SCL features application was able to display disabled items as a features item
- DLC: Added reply support to DLC comments
- DLC: Removed device affinity for comments made to the DLC
- DLC: Wired DLC comments into the system notification queue
- HCL: Wired HCL comments into the system notification queue
- News: Wired News comments into the system notification queue

2023-02-27
- Forums: Added notifications code to the forums toolbar to allow viewing of the users recent notifications list
- Forums: Fixed a data error in the notification history relation which was incorrectly attributing certain notifications as having be triggered by actions by me
- Contact: Added CSRF tokenisation and a forced HTTP 401 response to the contact submission form as the scummy little dimwits are hammering it with POST requests from VPN services and very occasionally getting lucky with a ReCaptcha pass

2023-02-28
- Forums: [Bug Fix] App titles were appearing as 'undefined' on the forum header control box rotator

Changes for March 2023

2023-03-07
- SCL: [Bug Fix] Categories "Clear Filter" button was inoperable
- SCL: It was possible to view disabled SCL apps in search results via the use of a category filter
- SCL: It was possible to view disabled SCL apps in the categories listing
- Badges: [Bug Fix] SCL App Submissions were failing to regenerate correctly

2023-03-21
- D&S: [Bug Fix] An error screen would display if punctuation were injected into the device ID selector in the querystring, though it was XSS safe

Changes for August 2023

2023-08-02
- SCL: [Bug Fix] Free apps were writing 0 values and "GBP" currency flags into the database

2023-08-23
- Core: Updated kernel marbl Amazon ID's to re-introduce Canada
- Marbl: Marbl 0.9.17

2023-08-31
- Search: [Bug Fix] Search results would error for DLC items if the download had a null developer reference


Changes for September 2023

2023-09-01
- CAB Maker: Enabled the accidentally disabled sub-folder field on individual files not being copied to the root
- CAB Maker: Added clarifications to the CPU selection labels over which are to be used for MIPS II and MIPS IV

2023-09-05
- CAB Maker: Attempts to implement a successful file copy onto the root folder of devices
- CAB Maker: Fix for different trailing slash behaviours depending on base installation directory and file installation directory chosen