4kev.org

I picked up web development recently and made an imageboard inspired to 4chan and Lainchan. It still lacks many features but any suggestion or opinion would be welcome

>>1650 What language are you writing it in? I was thinking about making an imageboard myself.

>>1650 neato I'm gonna go soykafpost on it for awhile and see

>Need to be registered to post Thanks, but no thanks.

Since you have some PHP skills you might want to volunteer to work on the lainchan.org team https://lainchan.org/%CE%BB/res/483.html

>>1657 You can post without needing to register

>>1658 seconded.

>>1650 Dude I just found that spaces in image filenames totally fuarrrk up your HTML generation.

>>1661 Thanks man, now it's fixed :) hope you stick around

>>1671 I shall, is a nice website. Sorry for reporting like 10 times I didn't know where you were checking lol.

Cool idea but kinda without an identity

Just wanted to let you guys know that now 4kev.org is on github https://github.com/federicoolivo/4kev For those who don't know it, it's a cyberpunk imageboard made from scratch, so it still has many bugs. Feel free to contribute to the project or just give us suggestions. One of the users even created an addon for it called Turbo 4kev

4kev best website.

>>2534 I'm not sure if you should have made that code public yet. Theres at least one place where you don't sanitize user input and send it straight to MySQL. Then there's no password hashing (let alone salting). Also the language enhancer logic is not exactly flexible. You should read derezzed words from a file or DB instead and do a foreach on them instead of having a hardcoded if-else.

>>2538 We received many attacks in the past and those were the times when I learnt more about security. If I didn't make the code public I wouldn't have received your suggestions which are very useful. Hope you stick around

When registering, there's no validation on the emails. I accidentally missed the part after "@" and now my username is forever taken with an unreachable email address. I'd make a PR if I knew any PHP.

When did 4kev become a cyberpunk website? I used to only see it posted on [s4s] and always thought it was for dank maymays. >>2539 Thank you for being open to this stuff. It's fun to be able to test attacks on real websites without having to worry about going to jail.

Two suggestions: 1. Redirect HTTP to HTTPS. Plaintext HTTP really has no place in today's internet anymore. 2. Make it possible to post without JavaScript. I don't want to have to execute some random site's code just to post. HTML entry forms exist for a reason.

>>1650 Well unlike mexchan it actually loads so you're ahead

From a /λ/ point of view the way you handle DB operations will make the scaling of this horrible. At the very least use WHERE to find the data you're looking for, don't fetch everything and loop through it in PHP. When doing updates do the conditionals in the UPDATE query no weird fetching all data and do the conditional in PHP. From a /sec/ point of view a cursory glance show that there is two self XSS'es (one in user name and one in style) and CSRF everywhere. Besides making it possible for me to make other people post for me these combined creates an XSS. There's also no security headers so there's no mitigation on how that XSS can be used.