my own "yet another imageboard-script" (116)

1 Name: #!/usr/bin/anonymous : 2007-02-26 01:26 ID:Hw07jnmQ This thread was merged from the former /code/ board. You can view the archive here.

So - I promised a friend to set up a imageboard for him, but I quickly realized that the only good (open source) imageboard out there is written in Perl.

I didn't take long before I got hooked on the idea of writing my own board.
I have to admit I'm a ruby fanboy (no flameing please :) ), but that doesn't change the fact that 90% of webhosts out there only supports PHP, so I decided to write it in PHP5/MySQL5.

Yesterday I had my first, sort of, working release which I really would like some feedback on.

It's not, in any way, intended to be used in real life yet, but I some of you would help me download it, test it, report problems, give feedback, suggestions etc. etc. etc. It would be really cool :)

thanks in advance

oh yeah - and the URL to the project page is: http://code.google.com/p/4chandk/

2 Name: #!/usr/bin/anonymous : 2007-02-26 05:54 ID:ZO8PdVxT

mySQL Injection GET

stripslashes doesn't cut it.
use mysql_real_escape_string instead.

3 Name: #!/usr/bin/anonymous : 2007-02-26 07:59 ID:Hw07jnmQ

>>2

Thanks a lot

fixed in SVN now. (NB, note that I havn't bothered securing the admin-panel, it going for a complete rewrite anyway).

4 Name: #!/usr/bin/anonymous : 2007-02-26 23:46 ID:Heaven

> I quickly realized that the only good (open source) imageboard out there is written in Perl

This is a problem because it is... too fast? Too secure?

5 Name: #!/usr/bin/anonymous : 2007-02-27 00:27 ID:Hw07jnmQ

>>4

it's a problem because a lot of people don't know Perl very well, because it's not default on (more or less) every webhost out there, and it can be buggy to setup since you only get a error500 when something is wrong.

over all my point is. PHP may, in many ways, be a horrible language - but it has one very big advantage: "it's without doubt the most used language out there for webscripting".

Anyway - why i wrote this in PHP doesn't really matter since it's my decision, and it's not going to change :) Now I just try to get the best out of it.

6 Name: #!/usr/bin/anonymous : 2007-02-27 02:31 ID:ZO8PdVxT

Worst thing that could happen

PHP: mySQL injection'; DROP TABLE foo'
Perl: ../../etc/passwd%00

Return Entire thread Next 100 posts Last 50 posts
Name: Link:
Leave these fields empty (spam trap):
More options...
Verification: