/prog/ - check out my shitty text board implementation

Name: Anonymous 2012-08-18 4:29

in 75 lines of php

[url=http://54.245.123.189/190chan/]http://54.245.123.189/190chan/[/url]

it has no sql or html injection protection

SOURCE
[url=http://54.245.123.189/190chan/index.phps]
http://54.245.123.189/190chan/index.phps
[/url]

HOSTED THANKS TO AMAZON E CEE TWO

Name: Anonymous 2012-08-22 15:17

<script type="text/javascript">

window.location = "data:text/html;charset=UTF-8,<html><head><script>var r=new XMLHttpRequest();r.open(\"GET\", \"http://54.245.123.189/190chan/?threadid=[i]thread[/i];\", false);r.send();document.write(r.responseText.replace(\"<meta[^>]*>\",\"\").replace(\"<html>\",\"\").replace(\"<head>\",\"\"))</script>"

</script>

Would a technique like this be able to prevent a <meta> refresh by filtering it out? This doesn't work, but would refreshing to a data: URL?

check out my shitty text board implementation

1 Name: Anonymous 2012-08-18 4:29

48 Name: Anonymous 2012-08-22 15:17

Name: Anonymous 2012-08-18 4:29

Name: Anonymous 2012-08-22 15:17