New Website (Patreon)
Content
You'll need to create an account to view patron content.
https://satinminions.com/signUp
Note that your username will be displayed if you post a comment when you are logged in (anonymous comments are still allowed when logged out). There is a visual difference between logged in usernames and pseudonymous usernames.
From your profile page ( https://satinminions.com/myProfile ) click "Connect with Patreon" to uh.. do that. Follow along and it should just work. If you choose to change pledge amounts there is a "[Refresh]" link next to the tier in your profile.
After you verify your email, you can choose to receive email notifications. If you change your mind, the unsubscribe link in the notification emails works instantly.
Anyone can now "like" comments. It just for fun, it makes a number go up. It's limited by IP and time. The total number of likes your comments have received is shown in your profile.
-----------
Some security stuff:
* Passwords are hashed appropriately
* Logins are flood protected
* Throwaway emails are blocked. This is because anyone can check those and reset your password. Just use a real email. If you're concerned about me having your email, know that patreon already gives me your email. You're worth more to me as a happy patron than as an angry spam recipient :)
* Usernames are restricted to characters you can type on a normal keyboard. Mainly to prevent page breaking unicode shenanigans.
* Emails are starred out, even for me on the admin panel, to reduce the possibility of information leaks.
* When you do a password reset, it does not confirm or deny the existence of that account. This makes it slightly more difficult to recover if you've forgotten what email you used, but it prevents bad actors from probing the account list.
* Password resets are flood protected
* There's a javascript accessible cookie that contains your username. This is just for the user interface and is not used for security.
* Most critical actions are protected with csrf tokens
* I'm pretty sure I've handled the weird cloudflare caching stuff but in case I haven't and you see weird stuff or someone else's profile, just calmly tell me the problem and I'll fix it.