Jump to content

COBOLdinosaur

Members
  • Posts

    175
  • Joined

  • Last visited

Everything posted by COBOLdinosaur

  1. The menu is using a class "demo_container" with a fixed width in pixels. When you use a fixed unit of measure like that the element cannot respond by resizing when the screen size changes. It remains at the fixed width unless it is modified with script. You should never us pixels for posiitioning or setting dimensions if you want a responsive design. use a percentage, em, or vw. You need to go through all the CSS to insure that you do not have fixed elements that will block responsive behaviors.
  2. Well the first thing you need to do is fix the code so it can be validated. It is one thing to have a few errors, but it is quite bad when the code is so badly malformed that the validator can't even get through to the end of the page. There may or may not be solutions to your problems, but there is no value in wasting time on such things when the page code is such a mess.
  3. Simple the page is bloated and takes too long to fully load. How bloat that clogs the pipe is resolved is different across operating systems, browsers and different versions of both. The solution to reduce the load time by removing some of the bloat. You noticeds the problem on an Ipad, but there are probably other platform combinations with issues. It would be a benefit to speed up laoding anyway, because the slow load is probably costing you traffic. An animated loading cartoon, is not going to haold any users; all it does is add a little more overhead.
  4. The only difference betwen free templates, and bought templates is that the guy selling probably worked harder on a demo page. The biggest test comes when you need support. Free or bought; you might or might not actually get support, and any software without support is worth about as much a moldy, week old bagel. If the seller does not have a site with support pages where you can post questions then you do not have a supported plugin; you have something that works on a carefully crafted demo page and might or might not do what the author claims it will do. The fact that you need to come to independent forums to try and find help is indicative of a lack of support from the plugin author or vendor; so yeah it is probably not a good investment, and I hope you did not pay very much for it.
  5. The half page is simply a file with only half the content, or if they are generating the pdf real time using PHP then the script simply limits output. As for how such sites get hacked, It can be as simple as creating an account and using code injection in a post; up to complex co-ordinated atacks from multiple sources that overload sevices running on the server and exploiting holes created by weak error handling. It depends on the security structure and quality of the backend. The code on the client has very little to do with it. Serious hackers do not use conventional browsers. They either attack server to server or with custom browser that do not follow follow normal protocols or security standards. Site that suffer attacks generally had an available attack vector because somewher in the site code, a possible condition was overlooked or not correctly handled. The hacker forums on the darknet are full of of tens of thousands of exploits that will work against specific conditions, and most hacker have bots visiting sites to gather information about them to see which site might be vulnerable to whatever exploit they are currently experimenting with. I have some large clients in financial services that record an average of ovwer such probes a day and come under attack 40 or 50 times a week. In some cases security fails at the perimeter and that is when we find out whether our security model actually works. Then after the attack we patch perimeter security so the same tactic will not work again because when such a hole is found, the attack method will be posted on hundreds of hacker sites within hours.
  6. I the div contains text and you want it bound to the image then use the tags design to do that put it in a <figure > tag and put the figcaption after the image wit the text: <figure> <img Your img /> <figcaption> the text you need </figcaption></figure> The figure will set its height to display both the image and the caption. Sementically any image that needs to be captioned or described should be in a figure. Semantically the div tag is for carrying style, not content.
  7. In general third party templates and plugins (both paid and free) are about 90% trash, and 10% usable and any third party code that includes jquery is a sacurity risk because about 15% of them contain malware. A lot of them are written by out of work developers who are not competent enough to make a living on ontract or in a staff position. Some are written by criminals (mostly free stuff) who are using the toys as a vehicle for trojans and virus design to steal banking, credit card, and personal information. AV software cannot always be relied on to catch the problem because it is a voluntary download, and unless the user specifically scans the files they may get past AV. The general quality is such that a single piece may work okay but as soon as you add anything additional you are moving toward a situation where a conflict or incompatibility will bomb things out. Jquery does not follow the standards for serializing and registering functions in the document object, Bootstrap soes not follow the standards and adds invalid CSS to the CSS object model. The rendering engines in modern browsers are design to try and repair or go around errors. However there is no standard for how they do that and each browser manufacturer has developed their own error handling code. The most severe situation is when the code the non-atandard code sets up a situation where code will throw an uncaught exception if it is executed. That will crash or hang the browser. Most of the time the rendering engine will be able to catch the exception at a point higher up the stack to prevent the crash, but when it happens the results are quite unpredictable. if you go out an find 1000 small websites that that do not work correctly it is almost certain that 90% plus will be using one or more of jquery, bootstrap and wordpress. It is not that those inherently produce bad code. It is because they are promoted to novice developers as a quick and easy solution; and they are far to complex and powerful for that group. It is like giving a 5-year old kid a pickup truck, a chainsaw and a shotgun for their birthday. I always recommend that anyone who wants to do websites invest the time to learn the technolies well enough to be able to evaluate the quality of things before they use them; not just how they look, but under the hood, are they going to be reliable or a contant problem.
  8. Well you have code from multiple source, and you are using Bootstrap, and using parallax. Bad karma. if the page is still not working corrctly then it is almost certainly a conflict between the pieces, or it may be that jquery in combination with bootstrap breaks the Document Object so badly that the rendering engine cannot get through the paint cycle beyond a certain point. You need to systematically look for conflicts by removing one piece at a time to see what is creatin the issue, and either ger rid of it or modify it.
  9. I don't know what makes you think that page is secure or that flash has anything to do with the security. The flash is simply a container, not a delivery mechanism. As for the page, the "security" is a joke. It appears that the primary thrust is to stick so much obfucate garbage in the way thay it discourage any who want to probe for the vulnerabilities. The page uses an obsolete and extremely weak DOCTYPE and the code is full of errors with the HTML validator reporting 56. An examination of the errors shows that some are structural, which means the page is broken, and with somuch sctpting on the page it is likely that the structural flaws could probably be used as attack vectors. So that site may be important to some people, but I don't see that they have content worth digging through all the crap to steal it. If the site was submitted by one of my student is would get C- for security; E for technical quality D- for usability D- for accessibility. if the backend of the site is as big a mess as the frontend; they have probably already been hacked; and may not even have noticed. If you are going to do a temr paper anout internet security, then you should be spending time on the darknet where the real security wars go on. You are not going to learn much in the homogenized visible web where civilized behavior is the norm, and you are certainly not going to learn much on such very tame forums as this one. If you want to find out how sewer rat hackers operate you have to go where they go; the sewer. The pristine academic approach to security only works for sites with nothing of real value. That is why big retailers and banks get hack following "best practices" out of academic circles. While hardened sites like amazon, and Google can generally fend off hackers, using the same kind of dirty (sometimes perhaps not legal) tricks as the hackers use.
  10. What are the api lines supposed to be doing, because it looks like most of the excessive scripting gets loaded, or gets loaded bu not executed..
  11. You either have to script it, or when you send the form you display a list of files. There is no dynamic solution without scripting. HTML by itself is static it needs scripting and/or css to do anything beyond basic rendering.
  12. It takes around 10 secods on the initial load. Anything over 3 seconds is considered slow, and over 5 seconds will cost you taftic in a big way. You have too much jammed into the page. Plus all those extra effects take away from the sketches. You should be featuring conte, not surrounding it with a lot of special effects. Layout and presentation are ther to support content, not take over and put on a show as part of the load. The sketches come up fine for me in Firefox you may have a setting or browser plugin that is causing the problem. When you have that much scripting on a page you are begging for cross-browser issues because of the damage jquery does to the document object. Oh and did you clear your cache, because if you didn't it might still be loading some stuff from the cache instead of the server.
  13. Just use a text input field and validate it on the server to insure it is specifying a valid path.
  14. It probably has something to do with the message telling you the Google API key is invalid, which may have something to do with the validation error indicating an illegal character in the url for the api, or it might just be that the bunch of validation errors (mostly for duplicate ids) are more than some browsers can tolerate, but with all the frontend scripting the page is slow enough loading that most users will never se the problem because they are going to go somewhere else instead of waiting. So try fixing your errors and you might get it to display. Expecting pages full of errors to work correctly is not a reasonable expectation.
  15. You have an unclosed div tag at line 51. View source in Firefox and it should hiighlight the end tag for the section containing the div. Such a structural error will not be handled the same in all browsers and that may be the source of the problem. When you have rendering errors like that the first step should to validate the code to see if there are errors in the markup. Trying to fix layout or presentation problems when there are errors in the code is generally a losing battle.
  16. Oh plain text; missed it. Seeing th site does bring the star of a solution. The markup is not valid. The validator a bunch of minor nonsense, but also the use of obsolete/depreciated tags and structural error. The problem looks to be structurally related so the place to start is to validate the code and fix the error. If that does not fix it then at least you know the structure is valid and the cause will most likely be an incorrect value in the stylesheet for the menu bar. The site actually has a bigger problem... the initial load time is way too long and probably results in lost visitors who are not willing to wait.
  17. To start with you learn how to respond politely and co-operate wih someone willing to try an help you. Perhaps someone with better typing will come along and offer a guess.
  18. N out of contexr frament of CSS and an image do not give us any real information about structure, layout or what is being applied directly or through inheritance. We need at the ver least the markup, and complete CSS, or preferably a link to the page so we can actually see what it is doing ar r'un diagnostics.
  19. Its Okay I am actually older than COBOL and I even beat the introduction of ENIAC by a little bit.
  20. I am not sure I understand what you are looking for. Give me a link to a page doing what you want done. If they are actually using flash then security questionable because flash itself is a security risk; and in addition flash is not supported on many mobile devices.
  21. Through a large part of my career I have done security apps for a number of large financial institutions. Everything is hackable. There is no such thing as total security for anything that can be accessed through the internet. I am not only capable of hacking into most sites; I also know the security history of most commonly used website components. If you need specific information about security concerns for any site then you should hire an internet security firm to do an examination for vulnerabilities and possible attack vectors. Any discussion involving "how security can be breached has no place on a public forum where anyone from angelic to evil can see and access information provided, and there is no way of knowing who is behind requests for hacking informatton. If you are as you seem to be insisting; honorable and honest then I appolize, then please do not take offense at my refusal to help, beca.use you could just as well be a scholl kid looking for help to go down the wrong path into a ife of crime.
  22. put the code for each page in its own include, and then use the value of the checkbox to include the appropriate code: if (!empty($_POST['mycheckbox'])){ include '../page1.inc';}else{ include '../page2.inc';} Or just resolve the page that that should be loaded client side and alter the action with javascript.
  23. COBOLdinosaur

    Navbar issue

    Anytime that you use display block you are adding line feeds to the structure and the changes both the interior and perimeter dimensions. try using display:inline-block instead. other possibilities are display inline-table or display:table-cell, but they will probably add height which is almost as bad as the line feeds.
  24. Taking someone's property without permission is theft! It does not matter how you intend to use it. You have no right to it. Nyone who helps you would also be a thief. I suggest if you want an education experience you read some bokks on ethics, morality, and honorable behavior. I am sure if you Google those you will find a lot of quality material that you will not have to steal to obtain.
  25. Let me see if I have this right... you want help to steal copyrighted content that the authors have clearly indicated they do not want to share by putting access restrictions on it.? Or am I wrong and you somehow have a right to this material?
×
×
  • Create New...