|
askphantom (m)
|
 Bring it on. This is a project i worked on with my team, actually three programmer and designers. I need you guys to be honest and as hard as you can get. www.engees.comEverything from design to name to programming, navigation, all you can think about. So lets have it.
|
|
|
|
|
|
yawa-ti-de (f)
|
You asked for it. I love it when people want it raw  Overall, very simple site and straight to the point. Reminds me of craigslist. Random clicking produced "0" results but I guess you need to do some populating. You should have used CSS as opposed to the tons of tables I saw in the source. Sure, the site is simple and so probably doesn't make a difference. However, especially if the site becomes a hit, every bit of bandwidth helps. CSS would reduce page download times considerably. 1) Contact form: My favorite if you know me well. It validates on the front end but the error messages aren't saying much - I filled out all fields with "d" and kept getting "all fields are required". Firstly, add asterisks by all fields and make the messages more descriptive. Don't just produce one error message for all (email not in right format, phone field is all numbers, etc) 2) http://www.engees.com/tradeSafe.php - right column - add more space above, "Enter Your Trade Safe Pin" 3) http://www.engees.com/safty.php - bullets not aligned 4) http://www.engees.com/openPost.php - probably best if your terms and conditions are available either as a checkbox beside the text, or some disabled field directly below it. I had to look for a minute before I saw the terms in the footer area. 5) http://www.engees.com/faq.php - as your site grows, I think this page will be better served if it lists the questions first and uses intra links to go to respective questions, with each answer followed by a "back to top" intra link. 6) http://www.engees.com/detail.php?id=25&st=Abia&sct= - I clicked "email owner" and a (cool looking) form popped up. I didn't fill any fields and clicked "send" but it wasn't obvious whether or not my (blank) message was sent. I think you need to fix this. Same applies to "mail friend". "Report scam" doesn't seem to be working either. 7 ) http://www.engees.com/tradeSafe.php - I entered a (fake) tradesafe pin and got an ugly looking page in return. I also saw this interesting message: Table 'engeesco_engees.tradesafe' doesn't exist - interesting. Fix it. 8 ) Home page: font family of "find a category" looks a little funny. I think all your fonts should be the same. Also add more space below the "advertize (sic) what you have or need". It is balanced compared to the other 2 columns. I typically would do this for pay but the simplicity of your site drew me out. As you can see, my comments are not the typical type. I actually have done some form of testing. It would be interesting to see what nitation would come up with, from a hacking perspective. I give it an 80% - correct the functional errors and I will come back and give it 101%, again for simplicity and going straight to the point. Good job, good luck! (Don't take this as a reason not to do what I noted above though. You still have some work to do  )
|
|
|
|
|
|
bug24 (m)
|
my name waz not mentioned so am not gonna talk, i aint & co. yawa should take charge, her name waz da first, she's da ish.
|
|
|
|
|
|
askphantom (m)
|
Thanks yawa. Would get it done and update you guys @bug24 Common, be a good sport and take a bite, i know you want some. I guess i know yawa and Omnipotent for their detailed critic of websites. You can be on my favoutite list too. Let me hear your opinion on it. 
|
|
|
|
|
|
OmniPotens (m)
|
@yawa-ti-de You have really commented on good and notable issues  @askphantom The "Advertize what you Have or Need" form needs to spaced a little more from the top of the section caption. http://www.engees.com/contact.phpThe sizes of the text boxes is big. Why not reduce a little more so as to fit into the size of the width of the layout. Check others having this same padding-top issue. (I viewed the web using FF3 for your information) Nice job there. I'm in love with the simplicity and it is just straight to the point.
|
|
|
|
|
|
nitation (m)
|
With Chrome, the Find by category dropped by 50% down the left and right boxes. Someone should verify!
- nitation
|
|
|
|
|
|
OmniPotens (m)
|
@nitation That is just the issue of browser compatibility issues. Most of the browsers are yet to upgrade to the W3C specs and until they do then they will be a unity in display of web pages. Or what do you think?
|
|
|
|
|
|
|
|
yawa-ti-de (f)
|
nitation: What about a quick hack test? 
|
|
|
|
|
|
nitation (m)
|
lol. Didn't wanted to voice out at first! I actually ran some tests and found out CSRF is possible
-nitation
|
|
|
|
|
|
OmniPotens (m)
|
@nitation One day, I'll come knocking at your door post. Hope you will open for me and make me home? 
|
|
|
|
|
|
nitation (m)
|
But remember am straight ---> and I don't do guys. More so, My pit bull is always angry with strangers. Anyway, we will work things around
- nitation
|
|
|
|
|
|
askphantom (m)
|
Thanks Guys, First phase is done. I will look into the hacks and make it more secure. As for the CSRF, I think a little mod_rewrite would solve that. Under development. It is not yet open to the public. Second phase would resolve all of that and add other functionalities to it. I will be calling you Guys again for this. Thanks again. 
|
|
|
|
|
|
nitation (m)
|
and who told you mod_rewrite will solve CSRF. You better ask your developers again!
- nitation
|
|
|
|
|
|
smartsoft (m)
|
well me i just like d logo se fi ni!
|
|
|
|
|
|
askphantom (m)
|
@nitation What do you think should be done to prevent CSRF?  Let me share in your wealth of experience.
|
|
|
|
|
|
Sprumbaba
|
This is my recommendation so far:
In other to prevent CSRF, i will advise you use frameworks for your development.
|
|
|
|
|
|
Sprumbaba
|
The first post(I got it submitted while typing). On your contact page, validation for email is not working. Make sure you use H1, H2, H3 tags for all title and sections on your websites. You need "HELP" menu right at the top also. Move "ABOUT" to the bottom of the page. Create a site map. Build a comprehensive footer and stick it to the bottom of the page with CSS. Use same font all through the website to ensure consistency Read more about CSRF prevention here http://www.gnucitizen.org/blog/preventing-csrf/ http://www.codinghorror.com/blog/archives/001175.htmlTry to use frameworks for your development for portal like this.(In case your programmer refuses to work with you, any other programmer can take it up from their. Most frameworks have solutions for CSRF and XSRF) Commendation The website is fast (tabless layout) Take care
|
|
|
|
|
|
askphantom (m)
|
Thanks Sprumbaba. Actually, i am the programmer and the website is still under development. I needed an extra pair of programming eyes to look at it and poke holes in it. Trying to work with Zend Framework though. Will look more into it and see how to combat CSRF. Thanks guys. 
|
|
|
|
|
|