As I posted here: http://tforum.pro/post/12f26e1c63bbc478c584
I can easyly fuck the Torboard project in less than a minutes just making post request. I tried to talk with the owner by the dms of tforum but i didnt get response, so this is what I found:
-----
I see a patern in your catphcha where you always set html like that
<label>What is 3 + 5?</label>
Check this shit
torsocks curl -s http://dobhq2ouqke7xxa6c62yigsifektstzpvmdeubtjd6v6jgxi7jfvxfyd.onion/?board=mental%20health | grep -i "<label>"
Temporal fix: add some random space beetwen numbers, so it is not determinist. But someone with bad intenction could use a more advance bash script and delete al spaces in order to get the numbers, but all we love Torboard so It doesn't seem like that.
As I said it's just a temp solution you should see how to implement a based captacha with images or something like that.
Other stuffs
-1 Use an minifier for HTML/CSS
-2 Fix length problem (set some limit for anything, since comment, images, titles)
-3 Doesn't load the HTML with all the content (just load the lastest 5 post, then use some index to go to previous). So if someone post 10GB of data, it will be render all in one request?
-4 Delete al shit Ied post & other posted that doesn't follow the point 2
-5 Add a JS advice!
-69 Add the catpcha in comments too! I doesn't want to fuck the comment section becasue I'm a bit bussy this week but I know it could be more easy to fuck (In fact I choose the post section beacsaue I know it was more complex than a spam attack in your comments section).
-7 Add some resticion at HTTP request. Bro I make every POST request one by one. Probably some limit per minute or seconds idk. The machine on which you host this page will thank you. The techinical word is a middleware.
-8 Other stuff we cannot control (almost with the currect implementation) is the like button. It could be fuck easy. Realy realy easy. You know, something that I personally doesnt like of forums is the like/dislike function beacuse we as humans we are so gregarious and our minds believe a post with 1000 like is better than a 2 like post. But it just a personal point forget it, I think you could fix that just limiting post request at likes in general :)
-9 Making a troll/anon forum isn't something bad or illegal. But when you gave access at this forum at people with bad intentions. Things could be wrong. I just hope you develop this project 100% at your own and you never put a line of code of Torboard on any AI model or browser. Beacause it could put your server at risk (they track you in their systems). btw '❌ Error: Wrong CAPTCHA answer', seems like a normal error response that has not been generated under any terms by an AI.
-10 Rule section shouldn't be something that could be commented by people.
General
I fuck a HS just with a bash script, Torboard second round...
Started by hot_pussy · Feb 3, 2025
btw you can still fuck the site too :)
http://dobhq2ouqke7xxa6c62yigsifektstzpvmdeubtjd6v6jgxi7jfvxfyd.onion/?board=general
1. "I tried to talk with the owner by the dms of tforum but i didnt get response." I messaged you first lol
2. You act like you've hacked NASA, you've hacked a basic PHP site.
3. Spamming the site doesn't make you cool, you ruin the experience for everyone else
4. This isn't my lifes work, im not fussed if you "fuck it" by spamming
5. You say the word "fuck" a lot
6. You spelt "easily" as "easyly"
Cheer up mush, It's just a bit of fun
2. You act like you've hacked NASA, you've hacked a basic PHP site.
3. Spamming the site doesn't make you cool, you ruin the experience for everyone else
4. This isn't my lifes work, im not fussed if you "fuck it" by spamming
5. You say the word "fuck" a lot
6. You spelt "easily" as "easyly"
Cheer up mush, It's just a bit of fun