Project Euler Humble Return

Re:Project Euler Humble Return by krapp on Friday August 07, 2015 @08:44PM (#10025862)

Probably. If they're not using PDO then that needs to be their first priority, dead stop. After that, maybe looking at their captcha script, because those sometimes have issues if they're not well designed. I don't know where theirs comes from but it doesn't seem to use much obfuscation so it's probably old. After that, Twig.

Although judging by a screenshot of the recent hack[0] posted here[1] escaping (and XSS) may not be an issue.

[0]https://i.imgur.com/pl22srz.png

[1]https://news.ycombinator.com/item?id=9990221

[ Parent | on HN ]

Re:Project Euler Humble Return by ProjectEuler on Friday August 07, 2015 @09:29PM (#10025973)

Admin from PE here.

We've already been using PDO. As for overall privacy/security, please see https://projecteuler.net/privacy

[ Parent | on HN ]

Re:Project Euler Humble Return by krapp on Friday August 07, 2015 @09:33PM (#10025985)

And PHPass as well, fair enough.

Thank you for showing up and addressing my armchair criticisms. I appear to stand corrected.

[ Parent | on HN ]

Re:Project Euler Humble Return by uxcn on Saturday August 08, 2015 @12:12AM (#10026295)

I genuinely hope the security hole is findable/fixable. Thank you guys for continuing to run an awesome service, despite asshats repeatedly trying to abuse it.

[ Parent | on HN ]

Re:Project Euler Humble Return by sfrank2147 on Friday August 07, 2015 @10:24PM (#10026102)

Thanks for the response!

[ Parent | on HN ]