can someone test the security of my website?

http://j4uvkoq27bvt4zkc.onion/index.cgi You can see this isn't a personal army request because I've put a message in the sidebar (which is only supposed to be accessible to the admin). Not sure if this is a permitted thread topic; if it isn't mods please delete it.

to clarify, i wrote that board software and want to make sure there are no glaring security holes

>>4871 As a disclaimer: I'm by no means a pentester, I have very little practical experience with looking for exploits. The most I've done is an SQL injection on a program I made for school. I tried doing an injection on the moderator tools page, didn't get anything. Seems like user input is being sanitized. So far, so good. Are there any particular feature implementations that you're unsure of? I could take a closer look at them. Sounds like fun to me. I like that the site works without Javascript. Seems like it does a better job than most chans, in that regard.

>>4891 My main concern is that people might be able to inject arbitrary javascript into the page. Someone else has already found such a vulnerability (it's still visible on some of the posts), but they were harmless and the underlying vulnerability has been fixed.

>fonts.gstatic.com

>not using vanity addresses get that eschalot running anon, or even better, use v3

>>5217 I originally intended for this to be a temporary testing website (hence why no vanity address) but I guess I'll leave it up indefinitely. >>4896 fixed (jewgle fonts no longer queried) see /freeboard.css for confirmation

>>5245 Just as you have your edgy attitude, the other anon just decided not to test your stuff, because of your attitude. You have an opinion, they have theirs. You aren't entitled to us pentesting your soykaf. You overreacted because you're too used to being an anonymouse image board user. So don't go all "so what" on stuff. If you want your soykafty opinions respected you ought to respect others right to tell you to go fuarrrk yourself. Sage for off topic.

what are some good pen tests

>>5520 Please tell me that you're trolling.

>>5520 Shake it, lick your finger and rub the tip, then scribble in circles on the paper till ink comes out.