SailNet Community - Reply to Topic
Thread: New search engine for sailboats Reply to Thread
Send Trackbacks to (Separate multiple URLs with spaces) :
Post Icons
You may choose an icon for your message from the following list:

Register Now

In order to be able to post messages on the SailNet Community forums, you must first register.
Please enter your desired user name, your email address and other required details in the form below.
Please note: After entering 3 characters a list of Usernames already in use will appear and the list will disappear once a valid Username is entered.

User Name:
Please enter a password for your user account. Note that passwords are case-sensitive.


Confirm Password:
Email Address
Please enter a valid email address for yourself.

Email Address:


Human Verification

In order to verify that you are a human and not a spam bot, please enter the answer into the following box below based on the instructions contained in the graphic.

  Additional Options
Miscellaneous Options

Click here to view the posting rules you are bound to when clicking the
'Submit Reply' button below

  Topic Review (Newest First)
10-29-2013 05:04 AM
Re: New search engine for sailboats

Another site you might look at is You can search by sailboats or point specific on the make and model you want. Thanks for your work on this although I think you just gave the admiral another reason to roll her eyes when she asks me what I'm doing on the computer.
10-29-2013 02:02 AM
Re: New search engine for sailboats

Just pushed a change with a in-house login system: SailboatLocator - Find your dream boat! It's now possible to create a username/password combination specific to sailboatlocator, however there's no password reset system yet. You can always PM me to have your password reset. You can still use your gmail account for logging in.

Next update, adding sailboat stats to the search results: sail area/Disp., ballast/Disp., Disp./LOA, LOA/beam, etc.
10-28-2013 01:43 PM
Re: New search engine for sailboats

@Argalax: There's now close to 60 OAuth providers (including Facebook, Google, LinkedIn, Twitter and other major players) and probably hundreds of thousands websites using OAuth for authentication and authorization. OAuth is the way to go if you're building a web app in 2013. Sure, there might be XSS attacks enabled by OAuth out there (a quick google search only gave me one such theorical attack), but it won't stop me from using my Gmail and Facebook accounts to log in other websites. I don't like having to remember 20 different passwords. I'm not saying "just trust me", I did offer to go over any HTML or JavaScript bits you were concerned about. I think that if you are accusing my website of being malicious, the burden of proof is on your side.

At any rate, since you are interested in using the site and since you are genuinely concerned by possible XSS attacks, I'll happily add my own custom login mechanism tonight. I'll handle password recovery through PM for now since I don't have time to implement a password recovery system.

I'll post an update once I've pushed the change,

10-28-2013 10:45 AM
Re: New search engine for sailboats

Perhaps you have good intentions. And I see the real value in your project – I would gladly use it myself...
However, Google search "cross-site scripting" (XSS) or check Wikepedia: Or better yet - read the Security and Abuse sections in the OAuth link you've provided yourself.
At this point you are saying “just trust me”.

I work in IT, and XSS vulnerability is something I have to deal often. You can accomplish what’re trying to using old-fashioned cookies, sessions and other methods.

Your website will gain more trust and loyal followers if you will not require its users to surrender their Gmail accounts.

Wish you luck with your project.
10-28-2013 03:43 AM
Re: New search engine for sailboats

I just added the "Dulicate Match" state, along with "Hide 'Duplicate Match' results". So if you see a duplicate match, select Duplicate Match which will hide the boat from the results. If you ever want to see all boats you've marked as duplicate, uncheck the "Hide 'Duplicate Match' results" and they will show, which would allow you to unmark the "Duplicate Match".

@Jimgo: I think that automatically grouping duplicate boats as you suggest would be the way to go. A naive "model + location + price" exact match should be pretty good (e.g., how many exact same models of the exact same year and price will be selling at the same time? not that many I'd think). Adding to the todo list.

10-28-2013 03:19 AM
Re: New search engine for sailboats

Argalax: Just taking an email address wouldn't be enough. I want to make sure that if you create a search on the site, only you can access that search. It wouldn't be enough since if someone's email address became public, everyone could access that person's search results. I sure could have users create their own username/password on the site, but then I'd have to handle storing passwords, recovering lost passwords etc. This is precisely why more and more websites use Facebook or Gmail for authentication. (see this Wiki article on OAuth - Wikipedia, the free encyclopedia). Please feel free to inspect any javascript source code (right-click and "View source") and PM me which part you think might be malicious, I'll be happy to go over and explain what's happening in the code.

If it makes you feel more confident in using the search engine, here's a link to my personal website Gabriel Parent which has a pointer to I don't know of anyone who would put a link to a malicious website on their personal website I appreciate your effort in warning the SailNet community about cross-site scripting as it can be an issue, however I guarantee it's not the case here.

I'd be happy to answer any questions,
10-28-2013 12:41 AM
Re: New search engine for sailboats

The mentioned boat searching site is likely to be malisious - a typical exploit of cross-site scipting attack. You don't need an AUTHENTICATED gmail account to send email notification - just an email address is sufficient.
10-27-2013 11:15 PM
Re: New search engine for sailboats

Good plan. It may be difficult to do an accurate de-dupe. When I was searching, I would have preferred to scan the ads myself, in case there was additional information, pictures, etc. in one versus the other. Perhaps a way of grouping suspected dupes might be a better alternative?
10-27-2013 03:44 PM
Re: New search engine for sailboats

Just added . It does create a lot of duplicates, it seems there's a lot of overlap with However I did find some new boats that weren't on either or (a nice Baba 30!)

For now I'd rather not try to deduplicate the boat automatically since recall is more important than precision to me. I'll be adding a way to hide the duplicate boats from the search results.
10-22-2013 04:03 AM
Re: New search engine for sailboats

I would also add classified list. It's mostly racing boats, but a lot of nice day sailers pop up there as well.
This thread has more than 10 replies. Click here to review the whole thread.

Posting Rules  
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On

For the best viewing experience please update your browser to Google Chrome