Re: free source for bbs

From: Jim Cochrane (jtc_at_shell.dimensional.com)
Date: 04/04/04 

Date: 3 Apr 2004 21:19:04 -0700

In article <c4nv4g$ng1$3@reader2.nmix.net>, Robin wrote:
> Well, it hasn't been hacked again in about half a day, I know how they did
> it the first time, fixed that, and I know how they did it the second time
> because my password for the admin script was something easily guessable, but
> the last time must have been done with some sort of exploiter script that
> submitted a lot of stuff through my forms through http. Can someone tell me
> a few lines of code I could use in the script - www.infusedlight.net/bbs/
> (download here) that would prevent it from being insecure, I know this is
> asking a lot, but I'd like to be able to be running a good, safe, secure
> message board system. In any event, I have a feeling that it might be really
> exploited soon now that I have a feature to mail posts to you, hopefully
> that doesn't happen. I also have a feeling that to get a secure script
> written I'll have to start over from scratch.
>
> Password files are no longer world readable.
>
> BTW, I'm a he-novice not a she- if you'd like to see some of the stuff I do
> as my main field of practice, writing, go to
> http://www.infusedlight.net/robin/stories.shtml - I know you're gonna say I
> should abandon programming, but why? There's no good reason for abandoning
> something once you've started and already have a backbone of knowledge for
> it.

If you enjoy it, then by all means, keep doing it, and keep learning how to
do it better. 

-- 
Jim Cochrane; jtc@dimensional.com
[When responding by email, include the term non-spam in the subject line to
get through my spam filter.]

Relevant Pages

  • Re: free source for bbs
    ... because my password for the admin script was something easily guessable, ... I have a feeling that it might be really ... I also have a feeling that to get a secure script ... should abandon programming, but why? ...
    (comp.lang.perl.misc)
  • Re: trends in fedora
    ... I had the feeling that I needed NM to get wsa working, but I'll try anything at this point. ... The timing of this startup may well have been right on the edge before the upgrade, and making something faster might be the one thing which made it too fast. ... Thanks to all who offered ideas, given the ability to generate a script and no issues about running it being too inconvenient, I'm regarding this as ugly but working. ...
    (Fedora)
  • Re: free source for bbs
    ... > because my password for the admin script was something easily guessable, ... quite a few security holes. ... > should abandon programming, but why? ... There is no need to abandon it. ...
    (comp.lang.perl.misc)
  • Re: system tray icons
    ... I had a feeling that would be my answer. ... > afaik, you ain't going to be able to do this from script... ... > You can find some sample vb code to enum systray icons here: ...
    (microsoft.public.scripting.vbscript)
  • Re: How to sort find results
    ... being a newbie at something is about as stupid as things generally ... The feeling will go away after a while, ... Sounds like it can't find perl, ... The script may be ...
    (freebsd-questions)