Currently outdated, updates coming with Naval Warfare!
STOCKPILE CODES
CREATE ACCOUNT
DELETE ALL STOCKPILES
The war has ended or you just want a fresh start.
Note: This action is irreversible. Stockpiles cannot be recovered!
CHANGE PASSWORDS
ABOUT
What?
Foxhole Stockpiles Map (FSM) has a simple goal: Making you (and
friends/clan) able to visually (and securely) store stockpiles on the Foxhole map.
How?
Easy, with the following steps:
Create an account with a name (6-15 characters) and password (Min. 7 characters).
Choose a hex / zone you want to get the list of stockpiles there.
Add a stockpile by name and code in the right location.
Pro-- Share your login and password with your friends/clan members so they can access it
too!
Profit
Security?
Your account, and your stockpile codes, are sacred so this is a very good question.
The following security measures are taken:
Account passwords are hashed with an industry-standard and battle-tested password-hashing
function known as bcrypt.
Every account login generates a token available for 30 days. If somehow leaked, there are
added checks to immediately unpair it from an account.
Every stockpile name and code is hashed through an algorithm known as AES-256-CTR, with an IV
(Initialization Vector) calculated randomly per account. This means that only people
with the correct login can access this information, others (including the website creator)
cannot.
Above image depicts two different accounts using the same stockpile name and code in the same
location, showing both are uniquely stored.
What to keep in mind:
Account names are stored in plaintext. This is necessary to compare them through the
before-mentioned bcrypt, as there needs to be an identifier (like an account name) as a
comparison.
Use a vague account name if you care about it existing in plain text in a database (common
practice forum forum logins).
Account admins can change passwords, editors can add/remove stockpiles and viewers only have
read access. Give the right code to the right person.
As passwords are encrypted, and no emails are stored, losing the admin passwords means
losing access to your account permanently.
TL;DR Account names are stored as plaintext, stockpile information is
encrypted per your account and can NEVER be accessed by anyone but you and you alone.
Cookies?
There are ever at maximum only three cookies stored, each with following purpose:
account_name - The website fills in the account box with this
information and compares passwords to it. Holds no power on its own.
last_hex - Holds the name of the last hex/zone you were looking
at. Makes it so you go back to that one on page reload/refresh.
token - A randomly generated token that helps with logins, is
useless on its own and if leaked can easily be locked down on improper use.
Issues? Questions? Don't trust it?
It's okay if all the above is a yes to you. You're always free to contact me on Discord through
djscias.
I can be found in Foxhole's Official
Discord and The Colonial Sigil
Discord. I'll try my best to reply to all the concerns you might have.
CHANGELOG
Additions, changes and removals to the Foxhole Stockpiles Map (FSM)
are displayed here. The most recent update is at the top.
1.1 Nimitz
1.1.0
Dusting off some code, implementing dark mode and improvements in some areas.
Added:
Clicking on the Colonial and Warden Home Region hexes will now display an alert as these regions can't have stockpiles.
Changed:
Updated map with changes in Update 52.
Made website function with default dark theme, most noticeable on the alert boxes and
scrollbars (as the Foxhole UI itself is darker).
Updated the Login and Logout icons.
Pass Code input now better checks that all inputs are numbers (the base 'e' character is no
longer allowed).
Updated logic for Admin "Change Passwords". It should now properly check for minimum characters and if all requirements are met before allowing submissions.