Why?

[anon42008019]

CAPTCHA is a lot better than what you suggested though.

@Herbert

but it’ll add another security layer though.

Is it really worth what I mentioned?

@anon42008019

It would unnecessarily slow down page load time + break media linked in it,

[Herbert]

@anon42008019

Is it really worth what I mentioned?

TBH, what you mentioned is true, but security comes at a price, buddy!

It won’t impact the load time a lot but the chance of manipulating the cookies is very low.

[joserfromeo]

@Austin-MO

Why does the free plan have inf bandwidth and all the other plans except the most costly have 250gb?

Got it! The free plan often offers unlimited bandwidth to attract users, while the other plans with a 250GB limit strike a balance between accommodating regular usage and reserving higher tiers for heavier data needs. The highest-cost plan likely includes unlimited bandwidth and premium features as an incentive for users willing to invest more.

[Admin]

@Herbert

The current cookie security mechanism is indeed preventing bots, but wouldn’t it be more efficient if you set the cookie value to reset for each request?

No, because:

@anon42008019

It would […] break media linked in it

You want to be able to set the cookie when the visitor opens the web page, and then reuse that cookie for any subsequent requests. The same cookie should work when downloading CSS, JS and images, as well as work on any AJAX requests that could be sent hours after

@Herbert

Yeah but it’ll add another security layer though.

Just blocking all traffic to every site is the best for security, but it has some obvious downsides.

There is always a tradeoff between making sites more secure and making them usable.

@Herbert

Why not using CAPTCHA? It’s very effective against bots.

CAPTCHAs are even more intrusive than the current validation system. If you trigger a CAPTCHA on page load, it may need a few seconds to come to a conclusion, and it may require visitors to complete a challenge to access the website. Cloudflare’s “Under attack” system does something like this, although they run checks before presenting the CAPTCHA, and only show the CAPTCHA to suspicious visitors.

The current Javascript challenge never requires any interaction from the visitor, and is really fast.

And even with a CAPTCHA, you will still need to set a cookie to mark a browser as secure so you can send additional requests (same as with our current system), which means it’s also possible to copy that cookie into a bot. So it doesn’t solve the problem we’ve been discussing here.

[YT_Xaos]

@Admin

The same cookie should work when downloading CSS, JS and images, as well as work on any AJAX requests that could be sent hours after

Sometimes when I’m on a page on my website and use AJAX to fetch something else, it will return the security system and I’ll have to reload the page (even if I had just opened the website).

[Greenreader9]

The cookie has a timeout period on it that is long enough for all requests for the current pageload to be made.

I would assume it is also used as a way to prevent chat scripts from abusing the servers from long sessions as well.

[Admin]

No, the cookie values are just rotated to prevent people from copying a cookie once and reusing it forever. Browsers seeing the challenge on XHR requests after some time is probably just an undesired side effect. After all, there are plenty of use cases to use XHR long after a page was loaded (notably on an SPA), not just chat.

[joserfromeo]

yup it does

[joserfromeo]

made a website use to download twitter videos work properly but im working on its theme wanted to improve more here is the link HIDDEN BY MOD - SPAM

[YT_Xaos]

What exactly needs to be improved? The theme looks just fine to me.

[joserfromeo]

it looks fine ?? thx for your opinion mate i suddenly posted another thread same like previous oone

[YT_Xaos]

I would say the only problem is the white space below the container for the input:

[joserfromeo]

thx for your advice im having a chat with editor