MigrateToFlarum Lab, the health scanner for Flarum

Ralkage

ITS ALIVEEEE

clarkwinkelmann

010101 never seen that before.

It doesn't seem to be related to any kind of IP or geo block. I can access your website fine from any of my IPs.

However any request made with the Guzzle PHP library to that URL causes a 500 error 🙉

$client = new \GuzzleHttp\Client()
$client->get('https://www.wilcosky.com/')
// GuzzleHttp\Exception\ServerException with message 'Server error: `GET https://www.wilcosky.com/` resulted in a `500 Internal Server Error` response

Looking at the body of the response, it seems to be an exception thrown by a Cloudflare Worker. The response includes "Worker threw exception" and "If you are the owner of this website: you should login to Cloudflare and check the error logs for www.wilcosky.com."

010101

clarkwinkelmann Once again Winkelmann I.T. saves the day. That pointed me in the right direction. For anyone else, if your web host connects with Cloudflare they might do something like add a "Worker" in your Cloudflare settings. I found I really don’t need the worker and so I removed it, everything works the same, and I'm Flarum Lab Verified, A rating. Which is all that matters in this world. If you have a Flarum, plus at least a A rating at the lab, you're somebody. 😎

Side note, I’m SO tired of hCaptcha. I had to go into different Cloudflare accounts multiple times and I’d typo my password so I’d have to solve the hCaptcha. If I have to tap on pictures of trucks or boats ONE MORE TIME, I might pop. 😂

luceos

010101 If I have to tap on pictures of trucks or boats ONE MORE TIME, I might pop.

Here is a picture containing traffic lights, select all of them to continue.

me: there are no traffic lights.

010101

luceos Right? Is that tiny corner of a motorcycle handle considered a motorcycle?

luceos

010101 I like the question about bikes, as they are both motorcycles and bicycles in my opinion 😂

Ralkage

luceos

My dad trying to get passed robo protection: Do they mean bike as in bicycle or bike as in motorcycle? I'm too old for this... 👴
Me: cough Invisible hCAPTCHA cough

Hari

clarkwinkelmann https://lab.migratetoflarum.com/

its not working if we are in v1.0

clarkwinkelmann

Hari I'll check this out as soon as possible.

I've seen error messages in my monitoring but I have not been able to investigate yet.

JohnP

Is there a reason why this doesn't show premium extensions that are installed, i.e. the WP extension?

clarkwinkelmann

The lab is now fixed and can scan forums using Flarum 1.0!

JohnP Is there a reason why this doesn't show premium extensions

It partially show them.

The extension list on the right is entirely created with data from Packagist.org. Because the premium extension aren't on Packagist.org, they don't appear there. Same for any private extension you might have installed from a workbench folder or other custom Composer repositories.

However you can see the identifier of these extensions in the javascript bundle size report on the left.

I have been considering an integration with Extiverse to pull the list of premium extensions with icons and everything but haven't had the time to implement it yet. I also wouldn't be able to guess the version of premium extensions without getting access to the checksum of the javascript files.

JohnP

clarkwinkelmann

That makes sense, thanks for explaining!

Would be nice to see them listed even without version numbers. 🙂

luceos

clarkwinkelmann I have been considering an integration with Extiverse to pull the list of premium extensions with icons and everything but haven't had the time to implement it yet. I also wouldn't be able to guess the version of premium extensions without getting access to the checksum of the javascript files.

I published an api client for you to use: https://github.com/extiverse/api-client. The checksum is something I can probably generate. Let me know what exactly you need.

poVoq

Reports my forum as version 1.0.0, while I am actually on 1.0.2

Is there a plugin for Flarum to enable HSTS?

clarkwinkelmann

poVoq Reports my forum as version 1.0.0, while I am actually on 1.0.2

That's expected. The lab will not be able to guess every patch version.

Also, I need to manually update the list of Flarum releases, which I haven't done yet so the lab isn't aware there have been updates.

poVoq Is there a plugin for Flarum to enable HSTS?

No, but an extension isn't really needed. It's easier to add the header in the Apache or Nginx configuration.

luceos I published an api client for you to use

I'll check that out when I find some time, thanks!

JohnP

For some reason the scanner is saying that it can't find HSTS headers on the site I'm testing, but they are definitely there, I can see them when I look at the responses, and a couple of other scanners of different kinds I've just tried also both pick it up and say it is valid.

I'm fairly sure that it used to find them on the same site, but now doesn't. Is there an issue with the scanner and HSTS?

clarkwinkelmann

JohnP I assume you are talking about EKO Diena. There was indeed an issue with the lab, I have now pushed a fix 👍️ Website is now A+ as it should have been 👌

It seems like Guzzle (the library I use to make requests) automatically transforms the header names when they are lowercase on most websites, but for your website they stayed lowercase when imported in my system and I was only looking for the headers with the first letters in uppercase. I have no idea why that is or why I didn't encounter this before, but I now made the code properly case-insensitive.

JohnP

clarkwinkelmann Yes, that's the site I was talking about.

That's a bit of strange issue, but with a super fast find and fix, thanks 👍️

Forhack

Hello everyone, I use flarum on my apache2 + mariadb server. Can you tell me how to fix these errors?

Kalecgos

Forhack Hi, the reason is that your Let's Encrypt ssl certificate is only valid for forhack.ru but not for www.forhack.ru. You can create a separate certificate for www using Certbot, e.g.

sudo certbot certonly --apache -d domain.com -d www.domain.com

and then adding this to the Apache configuration.

Forhack

Kalecgos big thank you!!

« Previous Page Next Page »