i have a virtual machine of a pre-configured version of scratchr from this forum post -> https://scratch.mit.edu/discuss/topic/53618/
would it be possible to somehow get that running on a proper website or?

rox wrote:

i have a virtual machine of a pre-configured version of scratchr from this forum post -> https://scratch.mit.edu/discuss/topic/53618/
would it be possible to somehow get that running on a proper website or?

Probably, but I’m no website expert, maybe ask chipmunk if he could add it to the site as like r.scr.chipmunk.land or something

rox wrote:

i have a virtual machine of a pre-configured version of scratchr from this forum post -> https://scratch.mit.edu/discuss/topic/53618/
would it be possible to somehow get that running on a proper website or?

I've honestly never worked with ScratchR, but generally speaking if you configure the website to listen on port 80 and then expose that port to the internet (for instance by port forwarding), and optionally getting SSL certificates (for instance via certbot) and configuring the site to listen on port 443 too.
You can also use tunneling services to expose a site running on any port to the net.

Heathercat123 seems to know some stuff about ScratchR, and even wrote a guide on setting it up under Windows. I'll try to tell him about the thread.

-S0dium- wrote:

rox wrote:

i have a virtual machine of a pre-configured version of scratchr from this forum post -> https://scratch.mit.edu/discuss/topic/53618/
would it be possible to somehow get that running on a proper website or?

Probably, but I’m no website expert, maybe ask chipmunk if he could add it to the site as like r.scr.chipmunk.land or something

So far all subdomains of scr.chipmunk.land are frontends to the same database, so Ideally a ScratchR frontend would do the same, however its database schema differs from APIClone's.
Heathercat123 seems to have started working on rewriting ScratchR for Django, the framework used by ScratchR2 and APIClone, and also to be plugged into APIClone. I think I might just want to use that.

chipmunkmc wrote:

Heathercat123 seems to know some stuff about ScratchR, and even wrote a guide on setting it up under Windows. I'll try to tell him about the thread.

That guide sucks and isn't meant for a public website, so don't expect it to "just work"! I'll definitely have to write a new one eventually.

Either way, I personally wouldn't blindly trust PHP code that's unmaintained since 2012, though the only weak points that I noticed are:

• It can only run on up to PHP 5.6 (IIRC) without patches
• It runs on CakePHP 1.2 RC2 from like 2008
• IIRC it has poor form validation at some places like the Sign Up form. Not that APIClone is any better.

I have a fork that resolves the first two, though it's pretty broken.

rox wrote:

would it be possible to somehow get that running on a proper website or?

Please don't. ScratchR's security practices aren't the best, let's say. For instance, it stores passwords in unsalted MD5, which, if someone gets access to the database using, for instance, some other bug in that box of PHP code unmaintained since 2012, would mean that user's passwords would be incredibly easy to crack.

Please don't host a public ScratchR instance.

Yours truly,
Someone who has experience with ScratchR

GIMME LINK

neweaglergigtek wrote:

GIMME LINK

There:

Heathercat123 wrote:

rox wrote:

would it be possible to somehow get that running on a proper website or?

Please don't. ScratchR's security practices aren't the best, let's say. For instance, it stores passwords in unsalted MD5, which, if someone gets access to the database using, for instance, some other bug in that box of PHP code unmaintained since 2012, would mean that user's passwords would be incredibly easy to crack.

Please don't host a public ScratchR instance.

Yours truly,
Someone who has experience with ScratchR

Aren't you working on a ScratchR frontend compatible with apiclone?

CuteRobot22 wrote:

Heathercat123 wrote:

rox wrote:

would it be possible to somehow get that running on a proper website or?

Please don't. ScratchR's security practices aren't the best, let's say. For instance, it stores passwords in unsalted MD5, which, if someone gets access to the database using, for instance, some other bug in that box of PHP code unmaintained since 2012, would mean that user's passwords would be incredibly easy to crack.

Please don't host a public ScratchR instance.

Yours truly,
Someone who has experience with ScratchR

Aren't you working on a ScratchR frontend compatible with apiclone?

Not exactly. It isn't ScratchR, but it uses ported ScratchR frontend code.

Heathercat123 wrote:

CuteRobot22 wrote:

Aren't you working on a ScratchR frontend compatible with apiclone?

Not exactly. It isn't ScratchR, but it uses ported ScratchR frontend code.

So basically the same experience?

CuteRobot22 wrote:

Heathercat123 wrote:

CuteRobot22 wrote:

Aren't you working on a ScratchR frontend compatible with apiclone?

Not exactly. It isn't ScratchR, but it uses ported ScratchR frontend code.

So basically the same experience?

Yeah, but without the same security flaws. Though some features not available on ScratchR2, like blocking users for instance, may be required to leave.

Heathercat123 wrote:

CuteRobot22 wrote:

Heathercat123 wrote:

CuteRobot22 wrote:

Aren't you working on a ScratchR frontend compatible with apiclone?

Not exactly. It isn't ScratchR, but it uses ported ScratchR frontend code.

So basically the same experience?

Yeah, but without the same security flaws. Though some features not available on ScratchR2, like blocking users for instance, may be required to leave.

I think the UI should stay but with a little warning that says "not implemented"