Bugs & fixes

Problem

When the progress bar looked failed (or a member retried the same batch), the server stored the same image files again. Toby’s Black Diamond set had 141 rows but only 58 unique pictures.

Fix

We removed exact duplicates from the 2025 gallery (kept one of each file), and new uploads skip the same file if it is already in that gallery. Prefer smaller batches; the form is not unlimited in one submit.

Problem

Members (including phone uploads) watched the progress bar reach about 97%, then saw “Upload paused / failed”. Server often had already saved and published the photos (302 back to the upload form with a green thank-you). The finish bar only maps to 85–97% until success, and the success page is the same URL as the form, so the browser treated success like a validation error.

Fix

Upload UI now treats a green flash success on the upload form as a real success, then reloads to 100%. Check the green “photo(s) uploaded” banner or the event gallery if unsure. Prefer Wi‑Fi and smaller batches (10–20) for large sets.

Problem

Homepage showed the correct next event title/date from the database, but the location blurb stayed hard-coded as Arthur River (Albany Highway between Williams and Kojonup).

Fix

Home card now uses the live event location (and first camping note when present). Event rotation no longer leaves stale venue text on the home page.

Problem

Members expected to register club membership and enter events via RiderNet, but Join Us only offered a paper form, Membership mentioned “open online via Ridernet” with no working button, and the RiderNet guide page body was scraped nav junk (PDF only). Easy to think RiderNet was gone.

Fix

Restored Join Us, Membership, and RiderNet guide as clear pages with Open RiderNet CTAs, club membership steps (search Vinduro), Trail Pass / entry outline, and PDF download. Next event and home also link to RiderNet. Website /register stays separate (site tools only).

Problem

A few bot submissions (random name strings like fTVgw…, nonsense letter-blob messages, and a non-English “what’s your price” scrape) still reached the Admin Inbox and info@ Sent Items. Older honeypot/timing/HTML filters missed pure random tokens with no links.

Fix

ContactSpamGuard tightened: long/random single-token names, spaceless alphanumeric message blobs, pure non-Latin messages blocked (club form is English AU — use info@ for other languages), min form time 4s, extra phrase list. Bots still get a silent fake thank-you (no DB row, no email). Recent junk rows cleaned from inbox.

Problem

Installed home-screen app looked stuck: red Bugs button (and other links) appeared to only refresh the same screen. Live site was unreachable because nginx on the club server had been stopped since 15 Jul afternoon — the app’s offline fallback silently re-showed the last cached home page.

Fix

Started nginx again (site live). Service worker upgraded to v5: offline now shows a clear “You’re offline” page instead of silently reloading home. Prefer install/open from vindurowa.com.au. Re-open the app once online so SW v5 can update.

Problem

A privacy notice email briefly showed leftover developer text at the top (“Shared vars…”, partials list) instead of only the branded message.

Fix

Nested Blade comments in the shared email layout closed early and leaked. Layout fixed; all club HTML mail uses the clean shell. Rule: never nest {{-- comments. Clean email resent.

Problem

After tapping Lookup my ride, the page often sat still for 10–30 seconds while Ara matched the bike and wrote Notes. No progress feedback, so people thought nothing was happening and refreshed.

Fix

While lookup runs you now see a dirt bike lapping a track, dust, a progress bar, and rotating status lines (“Ara’s in the shed…”). No fake engine noise. Specs still only appear when the match is honest.

Problem

If you had an open request with Simon, asking “what’s new”, token cost, or even a new bug report often got a long status dump of the old request instead of a straight answer.

Fix

FAQ / knowledge answers run first. Clear chat (button or “clear chat”) wipes history and starts a new session. Brand-new bug reports are not forced into old status threads.

Problem

On /admin/ai-token-cost, recent call times showed about +8 hours off (e.g. 5:01pm instead of 9:01am WST). Perth wall-clock was stored as if it were UTC, then shifted to Perth again.

Fix

Store timestamps as real UTC; calendar “day” and display use Australia/Perth (WST). Existing bad rows corrected. Times now match WA local.

Problem

Entering a wrong year (e.g. 1973 for a 1990s Suzuki RGV) still returned a full Notes & specs card as if that bike existed — invented period figures instead of saying “not found”.

Fix

Lookup now checks identity first (club catalogue + careful check). If the year/model don’t match a real bike, you get “lookup failed” or “I think you mean [correct year/model]…” and only then real specs. Form fields update to the corrected bike. We don’t invent machines.

Problem

Two spam signups overnight: gibberish names, dotted Gmail variants, every “why join” box ticked, random “other” text, Tor/VPN IPs. Accounts stayed unverified (no member tools), but still created noise and ops “new member” emails.

Fix

Deleted the two bot users. Register now has honeypot + timing trap, throttle, gibberish name/“other” checks, and a short **chat with Ara** before Create account unlocks. Bots that fail early get a silent fake “check your email” — no account created.

Problem

Using Share / Tell a mate (especially a personal Lineup wall like “Glenn Williams’s wall…”) put HTML entity junk in WhatsApp — e.g. Glenn Williams's wall of Shame and Fame instead of a normal apostrophe.

Fix

Share text was HTML-escaped twice before the phone share sheet. Fixed so names and apostrophes go through as plain text. Try Share again on any page with Tell a mate.

Problem

Members opening https://vindurowa.org (bookmark or home-screen app) sometimes saw the wrong layout on mobile — desktop-width nav or plain/broken styles — while vindurowa.com.au and vindurowa.com looked normal. All three hostnames already hit the same Laravel site; browsers treat each domain as a separate “app” with its own service-worker cache, so .org could keep an old layout after we fixed .com.au.

Fix

https://vindurowa.org and www now permanently redirect to https://vindurowa.com.au (same pages, one address). A special service worker on .org clears old caches and sends installed apps to .com.au. Main app service worker bumped to v4. Prefer Install app / bookmarks on vindurowa.com.au only. If an old .org home-screen icon still looks odd once: open it online (it should bounce to .com.au), or delete the icon and reinstall from .com.au via /install-app.

Problem

Members (and testing after AI retries) hit a hard cap of 5 classic bike uploads per 24 hours and were told to try again tomorrow.

Fix

Limit raised to 50 per rolling 24 hours for members (`VINDURO_CLASSICS_MAX_PER_DAY`). Admins and Super Admins are not capped.

Problem

Members filled year/make/model, tapped Fill specs with AI, then Upload — the phone spun or failed. Saving re-ran Ara on notes that were already pretty, inside the photo save, which often timed out on mobile.

Fix

If Notes already look like our layout (after AI or catalogue match), we only tidy them — no second LLM call. Notes formatting runs before the photo is stored; club email is after save. Clearer HEIC/JPEG errors and AI error messages on the form.

Problem

After updates, some members (especially with Install app / home-screen Vinduro) saw a broken or “plain” layout — missing the usual gold header styling, cards, and proper desktop vs mobile nav. The live site was fine on a clean browser load; the installed app was holding old CSS.

Fix

Service worker upgraded to network-first for HTML and CSS/JS (now v4) so styles always match the live site. Old caches are cleared on update. Mobile header tightened. Use vindurowa.com.au for the installed app (see also org-domain-stale-mobile-layout). If it still looks odd once: hard refresh or re-open the home-screen app.

Problem

Phone and action-camera .MOV (QuickTime) files uploaded fine but the HTML5 player failed or stayed blank in Chrome/Edge on many PCs. Safari was usually OK.

Fix

After upload, the server converts videos to browser-friendly MP4 (H.264 + AAC). Your post still goes live immediately; conversion can take a few minutes on long files. Refresh if the player looks blank at first.

Problem

Large videos sometimes finished the progress bar, then the post never showed. The file could land on the server while publish rolled back, and the browser treated a form error as success.

Fix

We capture file size/name before the file is moved, never fail a good publish because of ops email, and the progress UI only says complete when the page actually left the upload form. You can also Edit a Track View to add media if something went wrong.

Problem

Big videos used resumable chunks successfully, then the finish step posted the wrong field name (`videos_tokens` instead of `video_tokens`). Photos/maps could publish with no video attached.

Fix

Upload JS always sends `video_tokens[]`. Server still accepts the old name as a safety net. Track View and Mess both fixed.

Problem

After chunks finished, publishing Track View or Mess could return 429 because per-minute rate limits were too tight for large multi-chunk uploads.

Fix

Verified members no longer have those media rate limits on event photos, Track View, Mess, or chunk routes. The browser still auto-retries 429 if a proxy ever returns one.

Problem

The floating Ask Ara helper vanished from pages even though the chat code was still on the server.

Fix

Restored the layout include so the bottom-left Ara button shows site-wide again.

Problem

On short pages (e.g. empty Blog), the dark footer sat halfway up the screen instead of at the bottom.

Fix

Page layout uses a full-height flex column so the footer sticks to the bottom of the viewport.

Problem

A bad deploy briefly broke the photo helper used after upload, so some members (including Toby) saw failures when submitting event photos.

Fix

Photo processing path repaired and re-deployed. Event photo upload should complete normally again for verified members.

Problem

Outbound Ara mail used an old mail API that Laravel 13 no longer accepts, so some assistant emails failed to send.

Fix

Ara mail now uses the correct Symfony message API (`getSymfonyMessage`). Ops still get BCC on Ara outbound mail.