/wdg/ - Web Development General

firefox waifur edition

firefox 老婆版

>Free beginner resources to get started with HTML, CSS and JS

>零基础入门HTML、CSS和JS的免费资源

https://developer.mozilla.org/en-US/docs/Learn - MDN is your best friend for fundamentals

https://web.dev/learn/ - Guides by Google, you can also learn concepts like Accessibility, Responsive Design etc

https://eloquentjavascript.net/Eloquent_JavaScript.pdf - A modern introduction to JavaScript

https://javascript.info/ - Quite a good JS tutorial

https://flukeout.github.io/ - Learn CSS selectors in no time

https://flexboxfroggy.com/ and https://cssgridgarden.com/ - Learn flex and grid in CSS

>Resources for backend languages

>后端语言资源

https://nodejs.org/en/learn/getting-started/introduction-to-nodejs - An intro to Node.js

https://www.phptutorial.net - A PHP tutorial

https://dev.java/learn/ - A Java tutorial

https://rentry.org/htbby - Links for Python and Go

https://quii.gitbook.io/learn-go-with-tests - Learn Go with Tests

>Resources for miscellaneous areas

>其他杂项领域资源

https://github.com/bradtraversy/design-resources-for-developers - List of design resources

https://www.digitalocean.com/community/tutorials - Usually the best guides for everything server related

>Need help? Create an example and post the link

>需要帮助？做个示例然后发链接

https://jsfiddle.net - if you need help with HTML/CSS/JS

https://3v4l.org - if you need help with PHP/HackLang

https://codesandbox.io - if you need help with React/Angular/Vue

/wdg/ may or may not welcome app development discussion. You can post and see what the response is. Some app technologies of course have overlap with web dev, like React Native, Electron, and Flutter.

/wdg/ 可能会也可能不会欢迎应用开发的讨论。你可以发出来看看反应。当然有些应用技术跟web开发有重叠，比如React Native、Electron和Flutter。

We have our own website: https://wdg-one.github.io

Submit your project progress updates using this format in your posts, the scraper will pick it up:

用这种格式在你的帖子中提交项目进度更新，爬虫会抓取：

:: my-project-title ::

:: 我的项目标题 ::

dev:: anon

dev:: 匿名

tools:: PHP, PostgreSQL, etc.

tools:: PHP, PostgreSQL等

link:: https://my.website.com

repo:: https://github.com/user/repo

progress:: Lorem ipsum dolor sit amet

进度：Lorem ipsum dolor sit amet

Previous:

https://desuarchive.org/g/thread/109674252

图片: https://i.4cdn.org/g/1789023982177597.jpg

asp.net core razor pages are comfy af

ASP.NET Core Razor Pages 舒适得要死

Is https://1984.hosting a good place to buy a server for my website or no? Thanks in advance /wdg/.

The penpot mcp is bretty good. And its completely self hostable too

Penpot 的 MCP 相当好，而且完全可自托管

>>109736653

It begins

开始了

图片: https://i.4cdn.org/g/1789041119481443.png

p.10 no

>>109780550

interdasting

>>109780550

can you briefly explain he data? I see some IPs? why are there 2 pairs?

能简要解释下数据吗？我看到一些 IP？为什么有两对？

>>109782350

So, the way I do it I litter my page with `display: none` links to a hidden page. These links include a base64 payload that contains the requester IP and a unique id 'salt' (react's useId()) so every link is unique. If you follow the link, you end up at a nofollow,noindex(meta robots/X-Robot-Tag) page disallowed by robots.txt, with even more hidden links. If you follow them deeper, the final requester gets ip banned on the firewall level. The links store whole ip chain and that's what you are seeing. Right now the bots only went one level deep, but that's to be expected. It looks like they hold a fairly long queue of links to go through visit and it took them about 30h to start quering first honeypot links. There is way more these trap links than normal links right now so I expect the poisoned links to propagate through that queue in the following days and they should start getting banned one after another. The fact that one IP generated these links but another entered it hints that this is in fact a botnet, quite big too. Well behaved bots like google also entered that first honeypot page, but they use same IP and should just back off as soon they realize this isn't a page for them.

我的做法是：在页面上撒满指向隐藏页的 display:none 链接。链接带 base64 载荷：请求者 IP + 唯一 id 盐（react 的 useId()），每个链接唯一。点进去会到一个 nofollow、noindex（meta robots/X-Robot-Tag）且被 robots.txt 禁止的页面——里面还有更多隐藏链接。再深入，最终访问者在防火墙层面被 IP 封禁。链接里存了完整 IP 链，你看到的就是这个。现在爬虫只深了一层，符合预期。它们似乎持有一条很长的待访问链接队列，约 30 小时才开始查第一个蜜罐链接。现在陷阱链接远多于正常链接，预期毒链会在未来几天沿队列传播，它们应该会一个接一个被封。一个 IP 生成链接、另一个 IP 进入，说明这是 botnet，而且不小。守规矩的爬虫（如谷歌）也进了第一层蜜罐，但同 IP 进出，意识到不是给它们看就会后退。

I will post the live ban list csv if this method turns out to be effective.

这方法有效的话，我会贴出实时封禁清单 csv。

图片: https://i.4cdn.org/g/1789061278033327.png

>>109782585

botnets with infinite IPs, my tinfoil is now glowing, could this be coloudflare big net of extortion?

无限 IP 的 botnet，我的锡纸帽开始发光了：会不会是 Cloudflare 的敲诈大网？

>>109782648

Nah, it looks way more like an aggressive scrapper than intentional DDoS. All the ips are from random datacenters. I think it's just a really dumb scrapper for AI training getting confused by my no-js friendly searching UI.

不像，更像激进爬虫而非蓄意 DDoS。IP 全来自随机数据中心。我想只是某个给 AI 训练用的蠢爬虫被我「无 JS 也可用」的搜索 UI 搞糊涂了。

>>109782674

whatever it is ur doing some cool shit pham

不管你在干嘛，兄弟你干的是酷活

mainenance bump, keep it bumped guys

维护性顶帖，兄弟们保持楼热

>>109782648

it's ai scrapers

是 AI 爬虫

facebook is especially guilty of this, but of course the usual suspects as well

Facebook 尤其有此恶行，当然惯犯们也都有份

i wouldn't be surprised if cloudflare is in on it as well, obviously

我不会意外，Cloudflare 显然也有份

>>109782585

Clever shit.

聪明的活儿。

>>109785093

>facebook is especially guilty of this

>「Facebook 尤其有此恶行」

elaborate pls

展开说说

>cloudflare is in on it as well, obviously

>「Cloudflare 显然也有份」

wouldn't they be ddosing though?

那不就成了 DDoS？

>>109779268

uhh bros? how the fuck am i able to compete with this? https://x.com/supabase/status/2097999894632149229

furfix

in sweden it is forbidden by law to be a criminal

在瑞典，当罪犯是法律禁止的

imagine if privacy nerds were in charge of running the internet, no amazon, no spy cookies, privacy enforced by law

想象一下隐私极客管理互联网：没有亚马逊、没有间谍 cookie、隐私受法律保护

bupn

Shoe me ur mlg 420 noscpe regex

亮出你那 MLG 420 no scope 正则

>>109788186

>elaborate pls

>「展开说说」

not much to elaborate, they are well known for having scrapers that ignore robots.txt and being unnecessarily disruptive and heavy, as in ddos-tier

没什么可展开的：它们无视 robots.txt 的爬虫是出了名的，而且不必要地干扰且重量级——ddos 级别

>>109792104

>as in ddos-tier

>「ddos 级别」

that is key, I guess they're trying to disguise it then... it's affraid

这是关键，我猜它们在伪装……它害怕了

>>109789718

about that

关于那个

:: Fuze Mediaboard ::

:: Fuze Mediaboard（项目名）::

dev:: onionschan

开发:: onionschan

tools:: C++, Boost

工具:: C++、Boost

link:: https://fuze.page/software/mediaboard

repo:: https://github.com/Liteb0t/Mediaboard

progress:: 0.2 - 9/11 remembrance release:

进度:: 0.2 - 9/11 纪念版：

- Added "Live" page, where users can create a "Room" to share video or audio, like a Discord voice channel.

- 新增「Live」页：用户可创建「房间」分享视频或音频，类似 Discord 语音频道。

- Server can now have multiple "boards", and like existing Threads, they have customizable permissions.

- 服务器现在可有多个「板块」，像现有 Threads 一样可自定义权限。

- Split into two separate projects. The new splinter, FuzeHttp, is the C++ web framework on which Mediaboard stands.

- 拆分为两个独立项目。新分支 FuzeHttp 是 Mediaboard 底层的 C++ web 框架。

- Refactored C++ code to use modules.

- 重构 C++ 代码改用模块。

- Implemented cache control.

- 实现了缓存控制。

- Moved all configuration from `tokens.m4` to runtime at `config.ini`.

- 所有配置从 tokens.m4 迁至运行时 config.ini。

- Replaced boost::filesystem with std::filesystem

- 用 std::filesystem 替换 boost::filesystem

- Started work on adding thread-safety. Multi-threading is still experimental.

- 开始加入线程安全。多线程仍属实验。

- Improved input validation.

- 改进输入校验。

- Changed license from MIT to Fuze Human-oriented License v1

- 许可证从 MIT 改为 Fuze Human-oriented License v1

>>109793530

tell us about the architecgure choices and why, briefly, yes this is a job interview

简述你的架构选择及原因。是的，这是面试

>>109793634

You're telling me the graybeards saying I should be making ADR's weren't just being annoying?

所以那些白胡子老登劝我做 ADR 记录不只是在烦我？

>>109795601

I'm drunk, about the gaybeards I'm glad I didn't know them, but kiss is indeed king

我醉了。关于那些老登，庆幸我没认识他们，不过 KISS 原则确实是王

bupn

>>109793634

I wanted a C++ backend because it's my favourite programming language. I specifically looked for a library which had websocket support, and settled on Boost::Beast.

选 C++ 后端因为它是我最喜欢的语言。专门找了带 WebSocket 支持的库，最终定了 Boost::Beast。

For frontend I want an SPA but am avoiding framework/webpack bloat.

前端想要 SPA，但避免框架/webpack 膨胀。

>>109797022

hired

>>109797026

I don't feel hired

我没感觉自己被录用了

>>109797054

yes, this was a simulation, go get the irl deal

对，这只是模拟，去拿现实里的 offer 吧

So I have the basic layout for my site down but it looks ugly as fuck and I don't know how to fix it. Any suggestions?

网站基本布局搞定了，但丑得要死不知道怎么改。有建议吗？

图片: https://i.4cdn.org/g/1789207715356764.png

>>109797199

Show me your code

让我看看你的代码

>>109797208

I got tired of running into bugs so I decided to work on the UI. I'm not really a programmer (I'm an artist) but I want to make a textboard with live posting.

受够了 bug，决定做 UI。我不是程序员（我是画画的），但想做实时发帖的文字板。

https://pastebin.com/KGxf1pGq

>>109797240

Thanks.

I think the easiest fix is to add padding to some classes, so text is not grazing the edge. Also, limiting the width of the main content container makes it easier to read, but navbar can remain fill width.

最简单的修复是给某些 class 加 padding，让文字别贴边。另外限制主内容容器宽度更易读，导航栏可保持全宽。

I don't agree with the gray text on gray background.

我不赞成灰字配灰底。

I don't agree with such a bright colour for the board header; it draws attention away from the threads.

我不赞成板块标题用这么亮的颜色；会抢走帖子的注意力。

I don't agree with having a grid for threads rather than a list.

我不赞成帖子用网格而不是列表。

bupn

>>109797297

I changed the text color to be a bit lighter. I want the threads to be in a grid because I don't like the index view. I want it to be more like a catalog. I am not sure what to change the board header's color to.

我把文字调亮了些。网格是故意的——我不喜欢索引视图，想要更像目录。板块标题颜色还没想好改成什么。

图片: https://i.4cdn.org/g/1789214894359184.png

>>109797793

here's how I would do it

我会这么做

图片: https://i.4cdn.org/g/1789219239875896.png

>>109798262

Actually to align padding better

其实这样对齐 padding 更好

图片: https://i.4cdn.org/g/1789219611652811.png

>>109798302

I'm not sure how to fix the padding. I also like the bottom progress bar being seamless.

padding 怎么改没头绪。我也喜欢底部进度条的无缝效果。

What do you think about this theme? I wanted it to be the light theme.

这主题怎么样？想做成亮色主题。

图片: https://i.4cdn.org/g/1789219807296767.png

>>109798324

Looks too busy, and text contrast is off in places.

太花哨，局部文字对比度不对。

Learn CSS - it's easy and it's fun.

去学 CSS——简单又好玩。

>>109780550

>>109782585

And now they are properly falling for it.

然后它们真的中招了。

Banlist live: https://funmaker.moe/badbots.csv

>>109785093

Facebook scrapper appear to use proper user agent and respect robots.txt so far. So far no well named bot triggered ban, some just entered the first honeypot layer and left when they realized it's not for them.

Facebook 爬虫目前用正经 UA 且遵守 robots.txt。暂时没有正经名字的 bot 被封——有些进了一层蜜罐、发现不对就走。

图片: https://i.4cdn.org/g/1789224285295624.png

>>109798747

图片: https://i.4cdn.org/g/1789224678366625.jpg

>>109793530

Interesting.

>Changed license from MIT to Fuze Human-oriented License v1

>「许可证从 MIT 改为 Fuze Human-oriented License v1」

I've sometimes thought that if I were to open source something, I might use the AGPL, so that blood-sucking corporations can't benefit from my work for free. Or I could just not open source anything, and retain all the source code for myself.

我有时想：如果要开源什么，我可能用 AGPL，免得吸血公司白嫖我的劳动。或者干脆不开源，源码全留给自己。

page 10 no

第 10 页不行

>>109797199

the squareness of the page in contrast with the rounded corners of the input box trigger my autism hard

页面的方正造型对比输入框的圆角，我的自闭症被狠狠触发

>>109799149

If you're going to AGPL it, you're throwing the baby out with the bathwater. No sane indie developer will use your code, while Google may happily have a team of jeets reimplement it in 2 weeks, and it will be used to train AI either way. You might as well put all rights reserved, no modification allowed on your code. Not open-sourcing is also legit and understandable. AGPL is snake oil for people who want to LARP as "open source" without actually giving people freedom to use their code and wanting to actually releasing it as "freeware" without calling it as such.

你要 AGPL 就等于把孩子和洗澡水一起倒掉。正常独立开发者不会用你的代码，而谷歌可以愉快地派一队印度佬两周重写，反正都会被拿去训 AI。你还不如写「保留所有权利、禁止修改」。不开源也完全正当。AGPL 是给那些想 LARP「开源」、实际不给别人使用自由、实际想以「免费软件」发布却又不肯承认的人准备的蛇油。

>>109801005

That's not autism, that's called taste

那不叫自闭，那叫品味

>>109801604

kind of agree, would be cool if you dropped your namefagging in this general honestly

有点同意。说实话你要是在这总楼里少挂点 ID 名就更酷了

>>109801604

is not taste if not shared by some people

没被一些人共享的就不叫品味

bupn

>>109804710

a design rule broken without any sense of purpose looks like faulty taste

毫无目的地破坏设计规则，看起来就像坏品味

>>109805761

no

Why has every VPS provider increased their prices significantly this year

为什么今年所有 VPS 商都大幅涨价

At the beginning of this year I could easily get a VPS with just 1 GB of RAM, but now the cheapest ones have 2 GB or 4 GB of RAM, which raises the price

年初 1G 内存的 VPS 随便买，现在最低档都是 2G 或 4G，价格上去了

Yes of course the AI hype bubble means computer parts are being bought up, raising the price of all computer parts, but VPS providers could still offer a VPS option with 1 GB of RAM for less money than a VPS with 2 GB of RAM, and they choose not to, because they're bastards

对，AI 炒作泡沫推高了所有电脑硬件价格。但 VPS 商本可以继续提供 1G 内存档、定价比 2G 低——他们就是不，因为他们是混蛋