search

314parley / Haruko

Open Source Imageboard software that allows users to vote for it's staff [eventually :^)].
https://www.314chan.org
Other
13 stars 3 forks source link

Observed issues #12

Open Apogate opened 8 years ago

Apogate commented 8 years ago

Hi parley it's your saguaro friend, here's a laundry list of conflicts I have run into so you can iron them out before shit hits the fan with your 8chan advertising campaign:

I know this is a work in progress for you, I'll update this as I go.

good luck

314parley commented 8 years ago

yo how's it going!

Anyone can create a board and moderate another board's userbase

I just noticed this. I'm pretty sure I can fix this in javascript (and add server side checking to determine if a user can board.)

Can't change the style for my board from the panel.

Minor fix. Will do after some of the major issues.

Letting users rebuild board html is a HUGE security risk, autismos can just script it and consume resources for eternity.

I'm fixing that as I type actually. I knew I forgot a page.

Any board owner can see every other staff IP in the log. Huge problemo.

I'll be working on IP encryption for non-global admins sooner or later.

grumpy-anonsaba commented 8 years ago

I'll be working on IP encryption for non-global admins sooner or later.

Parley this isn't really necessary. You can very easily just hide the IPs instead of doing and encryption.