Hi everyone, In the last hour we moved web hosts, so please keep an eye out for any [new] bugs you see around the website. I did a snapshot of the database just before moving so that should all be fine, the main thing I have left to do is install the SSL certificate so we can get back to forcing https around the site. Thanks

Private messages are now fixed.

You can now see who is online, and who isn't again (it's been broken for some time, and always showed people as offline).

That's because I'm not logged-in to the chat.

Curufinwe, I was thinking about your question and wanted to explain...

The chat program we use at  the bottom right is by a third party called envolve – it's not very good and I'm looking to replace it – but separately to that, it uses a different way of detecting who is online and how many users are online at any given time.

The forum (which I wrote), where it says "and is online" above each user's post, uses the "session" store of our web server. Basically, every time a user visits the website a session cookie is created which I store in a folder on the server and associate with that user in the database so I can detect whether a logged-in user is online or not. The server, periodically expires these sessions, however, this isn't instant and often can be 30-50 minutes in between. This basically means that the forum can sometimes report that a user is still online, when they're not – and this will be cleaned when the session expires.

Should be working now, see your email and private message.

Hey Taz, my phone is saying this website is safe but the certificate is not valid, is there a reason? Welcome back Nirwen, haven't seen you on lately and just saying hello.

Thanks for the memo Elrohir! It's certificate was sticking up the website, and it is clear now, so thanks 

taz.

if I enter http:// instead of https://  in my browser, I can log in without using ssl. usually I would start sslstrip to create an insecure connection, because switching to http in the browser wasn't possible before. it seems ssl is not properly enforced. it should not be possible to log in over http, for obvious reasons.