>>
|
No. 6593
[Edit]
File
150948233859.png
- (417.21KB
, 500x600
, halloween hus.png
)
It would appear that even beyond HTTPS tohno-chan has quite a few technical issues. For one, it runs on Kusaba X, which is quite prone to spam. Although you may have modified it with preventative measures, and you may take regular backups. As far as that goes, I am unaware.
You seem to be using FTP to manage the uploading and management of your software, rather than a version control system like Git or Subversion. For keeping track of mistakes you make, upgrading software, and other things, this will make your life harder (Not that Kusaba X has been updated in quite a while anyway...)
In regards to Kusaba X, it is very old software, and PHP7+ and even recent versions of PHP5 are incompatible with it. Eventually the operating system that the server runs on will stop being updated - Naturally you would want to upgrade to the newest version, to ensure that your server is exploit free and secure. But you will find that you cannot do so because your operating system doesn't have such an old version of PHP in its repositories. This will lead to you either migrating software (something that I highly recommend doing) or you will be left behind on (eventually, very) insecure software. Kusaba X has many private exploits of varying degree; a good example of a public one was developed by savetheinternet: You can view it here: https://github.com/savetheinternet/kusabax-idcrack
This particular exploit can reverse a Kusaba X poster-ID into ~221 possible IP addresses. With some more filtering, we could very likely find a poster's regular IP address using this. Another exploit is apparently SQL injection, which lead to a site that will not be named getting all of its IP addresses dumped.
KusabaX is called KushitbaX in administrator circles for a reason.
If you decide to upgrade the software and hopefully your operating system (I'm sure it's quite old) I can suggest to the administrator vichan, which is slowly dying in development but it's much more modern and is PHP7 compatible, or LynxChan which is in active development but the frontend (what the user sees) is... somewhat ugly. The developer of LynxChan may be willing to work with you on that, though.
Way back on topic: As for the SSL, if you are on a newer
Message too long. Click here to view the full text.
|