World famous message boards?

DaveW wrote:

Hey, who doen't love fraud. This is better than reality TV.

They got all of the "wish my dream came true" guys and paid them minimum wage to post on this site.

These minimum wage guys have been a blessing, because they gave the next generation of runners an incentive.

What on earth are you taking about?

not a hacker wrote:

Cyboards PHP Lite has a five-year-old SQL Injection vulnerability that's never been patched by the developer. Under the right conditions this whole thing could be wiped clean with only a few keystrokes.

Obvious issues like the one you pointed out above are just at the top of the list. I've emailed the brojos at least twice suggesting, if nothing else, remove the phpinfo page. Low hanging fruit like that's just begging for disaster. Thankfully no one has gotten THAT mad at the mods yet. I am very surprised some random ping sweep hasn't turned on a non-visiting hacker to the boards in all this time. Chances of a disgruntled letsrunners taking the boards down...pretty slim. Chances of a random, bored cracker testing some new SQL injection utility or XSS/XSRF vector taking the boards down...much higher. Hijacking someone, let's say, an admin's account, is one thing. Taking down the boards is another matter entirely. That's when you pass from "hey dude that's not cool" to legally actionable.

LetsRun has an obligation to report threats which have nothing to do with a running board.

I recommend that they understand their business and act accordingly.

I think a vast majority of the people who come to this board like it just the way it is.

You can post pics. Most people choose not to display them, though.

It's the craigslist of message boards. Most of the posters love it this way.

You can change and add a lot of functionality without changing the look and feel of the message board... it isn't that tough...

For starters, they could fix the quote problem, where if you have quotes within quotes, the second one usually bombs.

they could add youtube tags so people could load videos right into the message board itself...

there's an endless amount of functionality that you can add without changing how these things feel to the user... but you have to remember that pretty much no money goes into the infrastructure of the site...

Giddy wrote:

they could add youtube tags so people could load videos right into the message board itself...

NO! this would make some pages of threads next to impossible to load. the clutter and tackiness would be awful.

change nothing. keep everything the way it is now.

To add to the security issues, this site generates probably one fifth the ad revenue with the same effort if placed on a more modern board structure. What do they get, 30k unique visitors a day, and serve a single 728x90 on each page? Good lord.

Giddy wrote:

You can change and add a lot of functionality without changing the look and feel of the message board... it isn't that tough.

Agreed. There are all kinds of pluses for upgrading the board:

> can save favorite posters, and see their post history, Renato for example;

> can block spammers, and never see them again, this would be the best feature of all;

> there is no need for avatars or signatures, just don't have them at all, or if they are available, turn them off;

> have the option to not show unregistered posters.

At the minimum it would be great to have the board look exactly the same, while having the features above.

scandinavian guy wrote:

Yet the forum software is from stone age or something? xD

How about a software upgrade?

How about you spring for them.

Yes there's nothing wrong with the format. I hate websites encrusted with megamedia crap, where if you're on anything less than full-force 4G bandwidth, you're f*****ed and not in a good way.

The problem here is censorship plain and simple. Needs an Arab Spring uprising to cleanse the ideology.