/prog/ - check out my shitty text board implementation

Name: Anonymous 2012-08-18 4:29

in 75 lines of php

[url=http://54.245.123.189/190chan/]http://54.245.123.189/190chan/[/url]

it has no sql or html injection protection

SOURCE
[url=http://54.245.123.189/190chan/index.phps]
http://54.245.123.189/190chan/index.phps
[/url]

HOSTED THANKS TO AMAZON E CEE TWO

Name: Anonymous 2012-08-18 4:30

fucked up the urls shit

Name: Anonymous 2012-08-18 4:32

PHP
Stoppped reading there.

Name: Anonymous 2012-08-18 4:42

i can do this in 1 line of node.js

Name: Anonymous 2012-08-18 7:58

I can do this in 1/2 line of Perl

Name: Anonymous 2012-08-18 8:48

>no sql or html injection protection
>no sql injection
>using PDO
>html injection
>implying this is difficult
>$str = htmlspecialchars($str);

Name: Anonymous 2012-08-18 16:33

check out my shitty text board implementation

1 line of obfuscated ruby

hxxp://bbs.neet.tv/lounge/

Name: Anonymous 2012-08-18 16:57

UPDATED WITH ACTUALLY USING THE INITIAL POST FROM A TOPIC

also what is this

yolo.txt: 2012-08-18 13:35:27
yolo.txt

anyone know pls send help

Name: Anonymous 2012-08-18 17:29

why do you use the same background graphics as /prog/? how hard can it be to just change the color of a solid image background?

Name: Anonymous 2012-08-18 18:17

>>6
Back to /g/ with your fake quotes.

Name: Anonymous 2012-08-18 18:30

>>7
What is exactly this and why does it have so many threads about the imageboards?

Name: Anonymous 2012-08-18 19:18

UPDATED WITH PAGINATION AND SORTING BY LATEST POST HOLY FUCK

also
http://54.245.123.189/190chan/?threadid=4

Name: sage 2012-08-18 20:01

oh god is that the one where the dog fucks the girl

Name: Anonymous 2012-08-18 20:33

>>13
happened to me once

Name: Anonymous 2012-08-19 7:53

You can close threads with <--

Name: Anonymous 2012-08-19 22:45

15
feature not a bug

Name: Anonymous 2012-08-19 23:00

<--

Name: Anonymous 2012-08-20 17:10

>>17
<!--

Name: Anonymous 2012-08-21 3:20

this is truly the most democratic of boards and better than bbcode in every conceivable way

Want to change the background? Just insert a change in css!

Shit thread? insert a <!-- (among other things) and DING DONG THREAD OVER

/polecat kebabs/?
<script>
location.replace("https://boards.4chan.org/b/");
</script>

Name: Anonymous 2012-08-21 3:33

This is awesome! Real HTML is a feature, not a bug.

Name: Anonymous 2012-08-21 5:04

Can somebody write a lib with ruby bindings for {b.i.u.o.uc sexmarkup}?

Name: Anonymous 2012-08-21 7:22

I think I found an sql injection.

Name: >>22 2012-08-21 7:33

and I have no way of telling the author without telling other people who would use it. so I can only hope for the best.

Name: Anonymous 2012-08-21 7:55

>>23
How about creating a new table and inserting exploit description it in?

Name: Anonymous 2012-08-21 8:19

>>24
perfect. gimme a second.

Name: >>25 2012-08-21 9:25

ok OP. look for a table called exploits. The desc string explains how to fix it.

Name: >>25 2012-08-21 9:25

ok OP. look for a table called exploits. The desc string explains how to fix it.

Name: 27 2012-08-21 9:31

actually I might have messed up the sql syntax when making the table. Just look in the access logs, I'm afraid of breaking something.

Name: Anonymous 2012-08-21 12:29

I love this... It's amazingly fun to mess around on websites like this.

Name: Anonymous 2012-08-21 14:54

the fuck is this

http://i.imgur.com/pmuAd.png

Name: Anonymous 2012-08-21 15:04

>>30
[EXPERT]NODE.JS[/EXPERT] [EXPERT]NODE.JS[/EXPERT] [EXPERT]NODE.JS[/EXPERT] [EXPERT]NODE.JS[/EXPERT] [EXPERT]NODE.JS[/EXPERT] [EXPERT]NODE.JS[/EXPERT] [EXPERT]NODE.JS[/EXPERT] [EXPERT]NODE.JS[/EXPERT] [EXPERT]NODE.JS[/EXPERT] [EXPERT]NODE.JS[/EXPERT] [EXPERT]NODE.JS[/EXPERT] [EXPERT]NODE.JS[/EXPERT] [EXPERT]NODE.JS[/EXPERT] [EXPERT]NODE.JS[/EXPERT]

Name: Anonymous 2012-08-21 16:21

updated with blazing fast virtual table query optimization



SELECT t.id,t.title,t.date

FROM (SELECT MAX(pt.date) AS latest_date, pt.id AS post_id, pt.threadid AS thread_id

     FROM posts pt 

     GROUP BY pt.threadid) lpd

LEFT JOIN threads t ON t.id = lpd.thread_id

ORDER BY lpd.latest_date DESC

LIMIT 20

OFFSET $offset;

Name: Anonymous 2012-08-21 16:30

where $offset = $_GET['offset'];

Name: Anonymous 2012-08-21 16:37

I accidentally redirected a lot of threads to meatspin and He-Man.
Sorry.

Name: Anonymous 2012-08-21 17:43

>>34
Fuck you, ``faggot''

Name: Anonymous 2012-08-21 18:34

I would rewrite it in C++ and skip the SQL bullshit.

Name: Anonymous 2012-08-21 18:40

>>36
Personally I would write everything related to the model in python. Then I would get all the controller stuff written in LISP in case you ever need to scale it with AI and such. Now the view I would do about half in php and the other half if html5.

Name: Anonymous 2012-08-21 19:39

>>36
Have fun reinventing the wheel with concurrent I/O nonsense.

Name: Anonymous 2012-08-21 23:18

Would /g/ have fun with this? Do they know enough HTML and JavaScript?

Name: 28 2012-08-21 23:21

ok OPP, I have revised my sql skills and have created the exploits table now. I think it was successful this time.

check out my shitty text board implementation

1 Name: Anonymous 2012-08-18 4:29

2 Name: Anonymous 2012-08-18 4:30

3 Name: Anonymous 2012-08-18 4:32

4 Name: Anonymous 2012-08-18 4:42

5 Name: Anonymous 2012-08-18 7:58

6 Name: Anonymous 2012-08-18 8:48

7 Name: Anonymous 2012-08-18 16:33

8 Name: Anonymous 2012-08-18 16:57

9 Name: Anonymous 2012-08-18 17:29

10 Name: Anonymous 2012-08-18 18:17

11 Name: Anonymous 2012-08-18 18:30

12 Name: Anonymous 2012-08-18 19:18

13 Name: sage 2012-08-18 20:01

14 Name: Anonymous 2012-08-18 20:33

15 Name: Anonymous 2012-08-19 7:53

16 Name: Anonymous 2012-08-19 22:45

17 Name: Anonymous 2012-08-19 23:00

18 Name: Anonymous 2012-08-20 17:10

19 Name: Anonymous 2012-08-21 3:20

20 Name: Anonymous 2012-08-21 3:33

21 Name: Anonymous 2012-08-21 5:04

22 Name: Anonymous 2012-08-21 7:22

23 Name: >>22 2012-08-21 7:33

24 Name: Anonymous 2012-08-21 7:55

25 Name: Anonymous 2012-08-21 8:19

26 Name: >>25 2012-08-21 9:25

27 Name: >>25 2012-08-21 9:25

28 Name: 27 2012-08-21 9:31

29 Name: Anonymous 2012-08-21 12:29

30 Name: Anonymous 2012-08-21 14:54

31 Name: Anonymous 2012-08-21 15:04

32 Name: Anonymous 2012-08-21 16:21

33 Name: Anonymous 2012-08-21 16:30

34 Name: Anonymous 2012-08-21 16:37

35 Name: Anonymous 2012-08-21 17:43

36 Name: Anonymous 2012-08-21 18:34

37 Name: Anonymous 2012-08-21 18:40

38 Name: Anonymous 2012-08-21 19:39

39 Name: Anonymous 2012-08-21 23:18

40 Name: 28 2012-08-21 23:21

Name: Anonymous 2012-08-18 4:29

Name: Anonymous 2012-08-18 4:30

Name: Anonymous 2012-08-18 4:32

Name: Anonymous 2012-08-18 4:42

Name: Anonymous 2012-08-18 7:58

Name: Anonymous 2012-08-18 8:48

Name: Anonymous 2012-08-18 16:33

Name: Anonymous 2012-08-18 16:57

Name: Anonymous 2012-08-18 17:29

Name: Anonymous 2012-08-18 18:17

Name: Anonymous 2012-08-18 18:30

Name: Anonymous 2012-08-18 19:18

Name: sage 2012-08-18 20:01

Name: Anonymous 2012-08-18 20:33

Name: Anonymous 2012-08-19 7:53

Name: Anonymous 2012-08-19 22:45

Name: Anonymous 2012-08-19 23:00

Name: Anonymous 2012-08-20 17:10

Name: Anonymous 2012-08-21 3:20

Name: Anonymous 2012-08-21 3:33

Name: Anonymous 2012-08-21 5:04

Name: Anonymous 2012-08-21 7:22

Name: >>22 2012-08-21 7:33

Name: Anonymous 2012-08-21 7:55

Name: Anonymous 2012-08-21 8:19

Name: >>25 2012-08-21 9:25

Name: >>25 2012-08-21 9:25

Name: 27 2012-08-21 9:31

Name: Anonymous 2012-08-21 12:29

Name: Anonymous 2012-08-21 14:54

Name: Anonymous 2012-08-21 15:04

Name: Anonymous 2012-08-21 16:21

Name: Anonymous 2012-08-21 16:30

Name: Anonymous 2012-08-21 16:37

Name: Anonymous 2012-08-21 17:43

Name: Anonymous 2012-08-21 18:34

Name: Anonymous 2012-08-21 18:40

Name: Anonymous 2012-08-21 19:39

Name: Anonymous 2012-08-21 23:18

Name: 28 2012-08-21 23:21