{"action":"created","issue":{"url":"https://api.github.com/repos/PokemonGoMap/PokemonGo-Map/issues/1145","repository_url":"https://api.github.com/repos/PokemonGoMap/PokemonGo-Map","labels_url":"https://api.github.com/repos/PokemonGoMap/PokemonGo-Map/issues/1145/labels{/name}","comments_url":"https://api.github.com/repos/PokemonGoMap/PokemonGo-Map/issues/1145/comments","events_url":"https://api.github.com/repos/PokemonGoMap/PokemonGo-Map/issues/1145/events","html_url":"https://github.com/PokemonGoMap/PokemonGo-Map/issues/1145","id":174977466,"number":1145,"title":"Allow the webserver to act as a dual \"admin\" and \"public\" access","user":{"login":"LordNeoZ","id":15716805,"avatar_url":"https://avatars.githubusercontent.com/u/15716805?v=3","gravatar_id":"","url":"https://api.github.com/users/LordNeoZ","html_url":"https://github.com/LordNeoZ","followers_url":"https://api.github.com/users/LordNeoZ/followers","following_url":"https://api.github.com/users/LordNeoZ/following{/other_user}","gists_url":"https://api.github.com/users/LordNeoZ/gists{/gist_id}","starred_url":"https://api.github.com/users/LordNeoZ/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/LordNeoZ/subscriptions","organizations_url":"https://api.github.com/users/LordNeoZ/orgs","repos_url":"https://api.github.com/users/LordNeoZ/repos","events_url":"https://api.github.com/users/LordNeoZ/events{/privacy}","received_events_url":"https://api.github.com/users/LordNeoZ/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/PokemonGoMap/PokemonGo-Map/labels/feature%20request","name":"feature request","color":"d93f0b"},{"url":"https://api.github.com/repos/PokemonGoMap/PokemonGo-Map/labels/wontfix","name":"wontfix","color":"ffffff"}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":14,"created_at":"2016-09-05T00:17:24Z","updated_at":"2016-09-05T02:33:28Z","closed_at":"2016-09-05T01:51:21Z","body":"We should clearly differentiate \"public access\" with \"admin access\" to help with shared maps.\r\nWe can't let users change location and opening 2 different instances is just not right. I've edited the GUI for the webserver-only and kept the \"admin\" version on a hidden port. Still it doesn't feel \"safe\". There should be password protection for admin (or even both) so we can customize the \"public\" version without worries about the admin options and also restricts the way the public can interact with the map (like not allowing notifications or to see the statistics or heatmaps).\r\n\r\n## Expected Behavior\r\nPassword protected web with admin and public passwords.\r\n\r\n## Current Behavior\r\nAnyone who founds your IP & Port can mess up with your scanner, even if it's Niantic or a third party, either making your accounts get banned for teleporting or trying to hunt you by checking the spots you're scanning and checking players with the same habits.\r\n\r\n## Possible Solution\r\nPassword protection for the website, More GUI flags to hide stats, notifications options or heatmaps or even not allowing anything, just to watch.\r\n\r\n## Steps to Reproduce (for bugs)\r\n1. Make a public map\r\n2. Share it\r\n3. Try to stop more people to use your map without changing the port/IP address\r\n4.\r\n\r\n## Context\r\nI shared a map (fixed location, custom gui to disable all features) some weeks ago, after more than a thousand people hammered my little VPS i had to shut down the map (normal gui on custom port, public access on port 80) and switch ports. Some days later i found people using the map again (despite i didn't shared this new ip address), so i had to change to no-server mode for the normal gui (so now i can't stop the map without accessing the VPS) and changed the \"public\" port again. Today i found about 300 people connected on the new port, so i guess someone is running a port scan of something. Now i added some basic password protection (using innerHTML to rewrite the whole document if the password isn't right, but i wonder how long will this last.\r\n\r\n## Your Environment\r\nPython 2.7\r\nWindows Server 2008\r\n"},"comment":{"url":"https://api.github.com/repos/PokemonGoMap/PokemonGo-Map/issues/comments/244646764","html_url":"https://github.com/PokemonGoMap/PokemonGo-Map/issues/1145#issuecomment-244646764","issue_url":"https://api.github.com/repos/PokemonGoMap/PokemonGo-Map/issues/1145","id":244646764,"user":{"login":"LordNeoZ","id":15716805,"avatar_url":"https://avatars.githubusercontent.com/u/15716805?v=3","gravatar_id":"","url":"https://api.github.com/users/LordNeoZ","html_url":"https://github.com/LordNeoZ","followers_url":"https://api.github.com/users/LordNeoZ/followers","following_url":"https://api.github.com/users/LordNeoZ/following{/other_user}","gists_url":"https://api.github.com/users/LordNeoZ/gists{/gist_id}","starred_url":"https://api.github.com/users/LordNeoZ/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/LordNeoZ/subscriptions","organizations_url":"https://api.github.com/users/LordNeoZ/orgs","repos_url":"https://api.github.com/users/LordNeoZ/repos","events_url":"https://api.github.com/users/LordNeoZ/events{/privacy}","received_events_url":"https://api.github.com/users/LordNeoZ/received_events","type":"User","site_admin":false},"created_at":"2016-09-05T02:33:28Z","updated_at":"2016-09-05T02:33:28Z","body":"@FrostTheFox Despite not getting where the line is in terms of support of shared/public maps I have to agree that the different GUI isn't something that's inside the scope of this feature request or the PokemonGo-Map itself.\r\nEven for private use any map externally available should have an \"admin\" password protection to disallow the location change without forcefully having it to be disabled from command line (-fl or -nsc), similar to the status page, it's something that could tamper with the statistics if done wrong on purpose by a third party.\r\nIf you're outside hunting and want to change the location, you should be able to do so, without risking someone else to find your IP/port and messing up with that."}}
{"actor":{"display_login":"LordNeoZ"}}