>>6094
i am working on one, "hold on to your butts"

>>6095

>>>/sup/59442

they're free, which is good.

Most have old, outdated versions of php, and might have unpatched exploits as a result, and shared hosts with shared sessions are more vulnerable to hacking, cookie theft and spreading of malware. Though this can be sort of mitigated by using custom session handlers and https if it's available.

tl;dr they're fine as long as you don't care if one day you wake up and find your site taken over by chechens.

no.

>>6080
>>6080
>2013
>ponies

>>6085
Jmyeom, Using public PC.

i do web hosting?...

i can offer webspace?

>>6085
Was bored and decided to look through a few parts of the codebase I didn't look at last time: found another persistent XSS, a very powerful one, just a few minutes ago. It does require certain conditions, however.

>>6087
Sorry, not really interested. Already have more than enough of my own cheap VPSs. Still willing to accept other offers. Not trying to be a dick here, I just want to have at least a half-decent incentive to divulge these.

Honestly, there are probably plenty more bugs hiding somewhere. I get lots of bad "vibes" when looking through this code. You guys need to revamp your entire coding style. Use a templating system that auto-escapes all markup output, and use an ORM or at least some kind of abstraction that utilizes SQL query paramaterization by default.

It's really hard to believe large, popular web projects like this one are still clinging to coding styles of 2003, when it's 2013. Then again, it is a PHP project, so I guess I can't expect very much.

>>6090
The problem isn't that it's php.. because obviously there are php frameworks much better designed, the problem is that kusaba's old and only really being supported by a couple of people, in their spare time, and it was never really designed with expandability in mind. They just recently addressed the fact that split() was still in there.

A lot of what you're suggesting is supposedly being added to the next version and I believe Jmyeom's redo of version 9. I know they're switching to Twig, don't know if they're auto-escaping by default but if they're not and not using the sandbox, function whitelists, etc they should, and they're planning to use a PDO driver.

But who knows when they'll even be done. It seems to be hobbyist code that took off, and you're probably right about there being a ton of bugs in it, just due to its complexity and age. If you can do better, go get a proper framework and do better.

>>6069
лолд

Op is a faggot.

Нульчебляди не могут в css?

o wow

kusaba is php macfag

http://www.apachefriends.org/en/xampp-macosx.html

hjhggj

this is another proof that mac users are idiots

capcodes are for fags.

>>6048
>>6049
means i dont have to keep on logging into manage panel and getting a posting password whenever i want to post as admin so my edits are trusted, just seeing my tripcode should be ok

Post a link then and let's get the party started.

snap.