Post links to English-language image boards here. To start off, here are the usual suspects:
http://www.iichan.net/ - DEAD DEAD DEAD
http://www.4chan.org/ - The original English-language board.
http://www.0chan.net/w/ - The Switzerland of image boards.
http://www.5chan.net/ - lol furries
Post more, unless they prefer to stay secret.
>>670
All gchan fuctions are removed from 四葉の芽スクリプト,
to respect the people who wrote them.
http://4chan.b33r.net/sparky4/+4/script/yotsubanome.phps
did you block <plaintext> html code?
This leaves you wide open to XSS attacks. Posting something like this will mess up your board:
<object></object><a style="position:absolute;left:0;top:0;width:1000px;height:1000px" onmouseover="document.location='http://www.google.com/'">Test</a>
You either have to stop all HTML, or you have to parse it by hand and pick out only the parts that are safe, which is very hard to get right.
ugh PHP is such a shitpile
Using extract() on a superglobal (especially superglobals which contain untrusted user input, like $_POST or $_GET) is extremely dumb. If you're going to do it, at least set the extract_type value to EXTR_SKIP or something so it doesn't overwrite existing variables with the same name.
Like >>680 said, if you're going to settle with sanitized HTML as markup, your best bet is to run $com though htmlspecialchars() and then reconvert safe tags back to their original value. Still, it'll probably be in your best interest to use a lightweight markup language instead, like Textile or Markdown.
Oh, living crap, learn how to do it right.
Actually just don't write a single line of code for the web until you have read and understood the entirety of this page -- http://ha.ckers.org/xss.html
Then, and only then, should you think about implementing your own input sanitizer. And even at that point, don't do it, because other people have already solved the problem much better than you can.
>>679
any time gchan anytime ^^
because you improved the futaba script ^^
you earned my respect!
You can easily get around that by adding spaces around the "=".
The point is, it's nearly impossible to stop people from abusing HTML posting. There is pretty much always some trick you can use to get around simple word filters. You really do need to run htmlspecialchars() on all user input, or it will never be secure. If you want to add youtube embedding, you're going to have to make some way to generate the HTML code yourself, and not let a user input it.
> If you want to add youtube embedding, you're going to have to make some way to generate the HTML code yourself, and not let a user input it.
This.
There's many ways it could be done. You could add an extra input field in the post form for youtube URLs, which can be parsed with the rest of the post. Just make sure the URL isn't malformed and points to an actual youtube video, and from that point you can nest the URL in whatever HTML you feel like to display it.
>>695
Let's all take Microsoft's example on security practices, it seems to work really well(!)
ウェブマスター、期限が過ぎて削除できない私の記事を削除してください。
私は思う、最大の防御方法は日本人以外にポストさせないことかも知れない。
Webmaster, please delete the article on me who passes the time limit and cannot delete it.
I might think, and the maximum means of defense be
$allowhost = array ( ". Jp", ". Bbtec.net");
multi-way translation site:
http://translation.infoseek.co.jp/
>削除しました。
ありがとう。
>だけど、XSSは本当に問題。もっと勉強とはいいと思う。
はい、あなたは正しい。
しかし、匿名投稿掲示板である以上、常に危険は伴う。
チャイルドポルノ画像を投稿される危険性。
フィッシングサイトのURLをリンクされる危険性。
:80 :8080 ポート以外の匿名プロキシを使われる危険性。
会員制ボード以外に安全は存在しない。
>>703
With? If you want help with something you're going to have to be more specific than that.
ty
>>707
Oh it was a Kusaba site? Never mind then. I'd rather do something better with my time.
Decent chan with a few original boards that I'll link to. /ap/ is NSFW. /m/ has some decent songs on it.
http://109chan.org/ap/
http://109chan.org/jnj/
http://109chan.org/aa/
http://109chan.org/m/
>>710
There's a big difference between original and stupid.
Give mr some cp webs
>>718
What is with you people making these terribly designed boards these days?
dfgdfgfgdclvkbifghjfdhflsdldldldflgbfgdf!!!!!!!!!!!!!!!!!
aLa lng poh?????????????????
Graffiti Board
http://dirtyhands.com.nu/
GeminiChan:
http://upload.geminight.com/
> * Surround text with ~~ to mark it as a spoiler.
Why not the /* */ that some other boards have?
Admin, please delete 714 to 716. This person wants to harass another one by publishing her e-mail and having CP sent to her.
>>314340346Another to add to your list...>>314339191http://2011chan.co.cc - Safe for work boards, be warned, the host I use sucks, as a result, the boards are slow as fuck, I use Futallaby, I modified it to allow image replies.
Switched hosts, 2011chan should work perfectly now.
Might as well post this here.
SilverJay has moved due to hosters not allowing adult material
http://silverjay.freehosting.com
SilverJay? (silverjay.freehosting.com) -> Yes I know it's a free-host, but any news/domain changes can be found on(silverjay.freeshoutbox.net)
Recently had to move to another host since my previous one suspended my account for hosting "Adult Material".
At least FreeHosting allows adult material.
Last site address change. The web address will now always stay the same, because it now has a registered domain.
http://silverjay.co.cc
http://www.momo-shi.net/ welcomes the more sane nomads of the wired... and the faint of heart! new and hopeless.
Not an image board, but I don't see a list of English text-boards, so I might as well post this here:
http://www.rateistar.com is a new one
http://4chon.net/ - Semi-fast English imageboard with /r9k/ and /new/. Also a test environment for new imageboard software.
>>764
There have been far too many `4chons' over the years.
I don't see why there are so many English image boards these days. Obviously it's a great format, but everyone seems to just want their own 4chan clones (or worse, clones of 4chan clones). Why not use the existing image boards?
>>765
It would be nice if there were more boards directed at unique topics not yet covered by other sites rather than what you described
>>765
I agree with you, but 4chon was not designed to be a mere 4chan clone (despite the name, which was only chosen because I had the domain lying around at the time of launch). 4chon was created as a reincarnation of the boards axed from 4chan (/r9k/ and /new/).
>>767
But--and let's be honest here--those were the worst boards.
>>765
Because if you run your own board site and somehow build an audience, then you get to be the prince of your own little feifdom and feel like you've accomplished something for once in your dreary pathetic life. You can then close the curtains on the basement window to block out the 7:00 AM sun and go to bed with a feeling of pride and accomplishment.
TRUE OTAKU HIKI NEET ORGANIZATION
>>770
http://vip-quality.org/neet/ is better.
Nobody even says anything, to accurately reflect the hiki spirit!
silverjay.co.cc
Seems to have died in the past few hours. I could access earlier today.