jpsank / puffyboa.xyz Goto Github PK

The way the website is structured, your database is publicly accessible to anyone, including tables of usernames and password hashes. (Good thing they are salted)

See https://puffyboa.xyz/db/apedia.db for an example

I'm not sure if this is intentional or not, but when an image is uploaded and submitted without text, nothing happens. The image is not visible and there is no error message

If you would like all images to be accompanied by text, I would at least recommend an error of some sort.

If a user is logged out, the site performs normally. But, if a user logs in, they are redirected to the home page (the one where the topics are listed) and it is blank, save for the "back to home" bar.

How to Reproduce

1. Go to APedia
2. Log in
3. See Results

When I upload images, the image url is broken, and points to nothing. (This occurs on the live site and my local installation)

When I run OpenChat on my local machine, I get the following traceback.

[Mon May 27 18:19:39 2019] 127.0.0.1:57290 [200]: /openchat/index.php - Uncaught Error: Call to undefined method SQLite3::lastInsertId() in /Users/lucas/PhpStormProjects/puffyboa.xyz/openchat/DBHandler.php:104
Stack trace:
#0 /Users/lucas/PhpStormProjects/puffyboa.xyz/openchat/index.php(28): DBHandler->postMessage()
#1 {main}
  thrown in /Users/lucas/PhpStormProjects/puffyboa.xyz/openchat/DBHandler.php on line 104

The traceback/error is not present when just submitting text.