I've implemented some extra security to the site. A hacker discovered a few exploits 2 months ago, and was kind enough to show me what the exploits were, and how to fix them. If you're reading this hacker, thanks again, and feel free to email me or contact me if you notice anything else.

If anyone notices any issues with the site that started occurring after this update, please let me know ASAP so that I can fix it.


Securing the Inputs
I've updated the script that analyzes and cleans any data that gets inserted into the database. I also updated the headers of the site, which can be viewed in the staff exclusive content below.
(Content hidden from non-Staff members!)


Securing the Passwords
I've updated the site's password encryption. The old was very outdated. The new one makes it so much more difficult to crack a user's password.

NOTE: User passwords will only use the new encryption after a user changes their password (and for new users). So, I highly recommend everyone update their Vizzed password at some point, if you want to ensure your account is more secure. I'll eventually make an alert that reminds each user to change their password.


HTML Cleaner
I'm utilizing HTMLPurifier for most input that involves HTML. This analyzes any HTML that gets submitted to the site, removes anything that might be potentially malicious, and also fixes the HTML if there's anything broken. Inputs that would utilize this include Posts, various profile editing, etc.

This also allowed me to eliminate the z tags that sometimes get placed into various thread titles, posts and other sections of the site.

Staff : I expect all of you to change your password so that your accounts are more secure. One of the accounts that the hacker was able to get into was a staff account. So I want to eliminate the possibility of any other hackers hacking into staff accounts.

Davideo7 : i agree with you about hacking & hackers should get punished

Well, given how I created this account nearly 10 years ago with the very basic passwords I could come up with by then, I guess it was way due for me to change it.

We were lucky that this hacker wasn't malicious. Normally, people with this kind of knowledge tend to cause harm and exploit the power they believe to have. The times when they actually want to help it's a huge step forward for the targeted place, and the changes brought up here are the best proof of it.

Davideo7 : (Content hidden from non-Staff members!)

EX Palen : Exactly. The hacker went out of his way to give me full details of what he found, and how to fix what he found.

(Content hidden from non-Staff members!)

Davideo7 : (Content hidden from non-Staff members!)