Winterchilla
PHP-rendered classic web app powering the MLP Vector Club's website since 2015.
“When the sun goes down, it transforms into a giant, monstrous version of itself.”— Source
Attributions
Used libraries, icons and tools include:
- Front-end:
Typicons,
Font Awesome,
loading.io,
jQuery,
ReactJS,
Fluidbox,
autocomplete.js,
CodeMirror,
moment.js,
simplemarquee,
dragscroll,
canvas.hdr.js,
noUiSlider,
FileSaver.js,
paste.js,
Draggable,
cuid,
Polyfill.io (cdnjs)
- Back-end:
moment.php,
PostgresDb,
WhichBrowser,
HTML Purifier,
socket.io,
Elephant.io,
MLPVC-WS,
FineDiff,
opensearch-php,
AltoRouter,
Parsedown,
IPTools,
svg-sanitizer,
svgo,
- Development tools:
Gulp,
Terser,
SASS,
Babel,
Autoprefixer,
Kint,
Hasklig,
Phinx,
Monolog,
wtfcmd
Please check the site's About page for additional credits.
Testing
Unit tests
vendor/bin/pest --configuration phpunit.xml
Browser tests
Browser tests use Playwright and require a running PostgreSQL instance.
First-time setup:
pnpm add playwright
pnpm exec playwright install chromium --with-deps
Reset the test database and run:
# Rebuild the test DB (uses TEST_DB_NAME from .env, defaults to winterchilla_test)
bash scripts/reset-test-db.sh
# Run tests
vendor/bin/pest
The browser tests start their own PHP server with TEST_MODE=true (enabling /test-login and the fake DeviantArt/Discord OAuth provider, and selecting the test database), so a local dev site can keep TEST_MODE=false in .env and sign in through the real DeviantArt. TEST_DB_NAME can be set in .env. Never set TEST_MODE=true in a production environment.
Static analysis (also runs in CI; configured in phpstan.neon):
vendor/bin/phpstan analyse --memory-limit=1G
Contributing
See CONTRIBUTING.md.
Thanks to
- MD. Nur A Alam Dipu (@Dipu1A) for responsibly disclosing an open redirect vulnerability in the application
- tjhorner and SlvrEagle23 for showing me that quotes around attribute values is a good idea
- DASPRiD for his contributions and bug reports
- parclytaxel and Trildar for their help with math-related code and numerous bug reports
- The members of our Discord server who continue to report issues and suggest features, making the site better for everyone
- Gaurang Maheta for the responsible disclosure of an open redirect vulnerability in the application
