kashire/lainchan
4
0
Fork 0
Code Issues 9 Pull Requests Releases Wiki Activity
The version of vichan running on lainchan.org
3,710 Commits 3 Branches 26 Tags 120 MiB
JavaScript 52.5%
PHP 30.9%
CSS 12%
HTML 4.2%
Java 0.3%
7a7574bdca
Go to file
8chan 7a7574bdca SECURITY / XSS : ?/edit allowed arbitrary HTML to be added by any user thru addition of <tinyboard raw html>1</tinyboard> 
This allowed ANY user with ?/edit privilege to also have raw_html regardless of whether they had $config['mod']['rawhtml']

Now, any changes to <tinyboard> markup modifiers via ?/edit are not allowed. They are removed at read time, and before write they are removed again and the ones in the database (which should be clean...) are inserted instead.

Please immediately apply this patch to your instance if you are running any version of 8chan/infinity.
2016-05-06 12:43:25 +02:00
inc SECURITY / XSS : ?/edit allowed arbitrary HTML to be added by any user thru addition of <tinyboard raw html>1</tinyboard> 2016-05-06 12:43:25 +02:00
js main.js: a bit more sane code 2016-05-05 15:37:50 +02:00
static Close #51: Prevent players from cheating the dice roller by using markup 2014-08-10 15:38:02 +00:00
stylesheets backport parts of 2d6d449bd2d72, in particular html classes 2016-05-06 12:14:28 +02:00
templates No more country flags in <title> 2016-05-06 12:40:37 +02:00
tmp add tmp subdirectory (a filesystem used for further optimizations) 2015-04-05 16:45:51 +02:00
tools tools/rebuild.php: fix for bans.php not included by default and public_banlist 2015-04-05 18:50:16 +02:00
.gitignore update gitignore 2015-04-05 18:46:45 +02:00
.gitmodules
banned.php fix banned.php; thanks stigma 2015-04-07 02:29:38 +02:00
install.php ... 2016-05-05 09:25:47 +02:00
install.sql ease the migration process for the previous security patch (by introducing another migration); restore php 5.4 compatibility (introducing a polyfill system) 2016-05-05 06:43:22 +02:00
LICENSE.md Updated license date 2015-01-01 10:48:28 +00:00
LICENSE.Tinyboard.md
mod.php Move login check in inc/mod/auth.php to a function 2016-05-05 11:40:52 +02:00
player.php Suppress warnings that might leak information 2014-08-09 12:14:56 +02:00
post.php Rewrite report system due to flooding 2016-05-05 12:57:52 +02:00
README.md update readme; mention php 7.0 compatibility 2015-09-11 13:17:33 +02:00
report.php Oops forgot a file 2016-05-05 13:33:14 +02:00
search.php oh hey look I just fixed #8 search.php 2014-09-25 06:24:36 +02:00
smart_build.php smart_build: fix one possible performance problem 2015-04-11 21:41:22 +02:00

README.md

vichan - A lightweight and full featured PHP imageboard.

About

vichan is a free light-weight, fast, highly configurable and user-friendly imageboard software package. It is written in PHP and has few dependencies.

vichan is a fork of (now defunc'd) Tinyboard, a great imageboard package, actively building on it and adding a lot of features and other improvements.

Support and announcements: https://engine.vichan.net/

Requirements

  1. PHP >= 5.4 (we still try to keep compatibility with php 5.3 as much as possible) PHP 7.0 is explicitly supported.
  2. MySQL/MariaDB server
  3. mbstring
  4. PHP GD
  5. PHP PDO

We try to make sure vichan is compatible with all major web servers and operating systems. vichan does not include an Apache .htaccess file nor does it need one.

Recommended

  1. MySQL/MariaDB server >= 5.5.3
  2. ImageMagick (command-line ImageMagick or GraphicsMagick preferred).
  3. APC (Alternative PHP Cache), XCache or Memcached

Contributing

You can contribute to vichan by:

  • Developing patches/improvements/translations and using GitHub to submit pull requests
  • Providing feedback and suggestions
  • Writing/editing documentation

If you need help developing a patch, please join our IRC channel.

Installation

  1. Download and extract vichan to your web directory or get the latest development version with:

    git clone git://github.com/vichan-devel/vichan.git

  2. Navigate to install.php in your web browser and follow the prompts.

  3. vichan should now be installed. Log in to mod.php with the default username and password combination: admin / password.

Please remember to change the administrator account password.

See also: Configuration Basics.

Upgrade

To upgrade from any version of Tinyboard or vichan:

Either run git pull to update your files, if you used git, or backup your inc/instance-config.php, replace all your files in place (don't remove boards etc.), then put inc/instance-config.php back and finally run install.php.

To migrate from a Kusaba X board, use http://github.com/vichan-devel/Tinyboard-Migration

Support

vichan is still beta software -- there are bound to be bugs. If you find a bug, please report it.

If you need assistance with installing, configuring, or using vichan, you may find support from a variety of sources:

Tinyboard support

vichan is based on a Tinyboard, so both engines have very much in common. These links may be helpful for you as well:

  • Tinyboard documentation can be found here.

Donations

Do you like our work? You can motivate us financially to do better ;)

  • Bitcoin: 1GjZEdLaTQ8JWVFGZW921Yv4x59f9oiZME

You can also ask us to develop some feature specially for you <3. Join our IRC channel and ask for a quote (there are a few of us, who work with the codebase and are skilled enough to develop such features pretty quickly).

CLI tools

There are a few command line interface tools, based on Tinyboard-Tools. These need to be launched from a Unix shell account (SSH, or something). They are located in a tools/ directory.

You actually don't need these tools for your imageboard functioning, they are aimed at the power users. You won't be able to run these from shared hosting accounts (i.e. all free web servers).

Localisation

Wanting to have vichan in your language? You can contribute your translations at this URL:

https://www.transifex.com/projects/p/tinyboard-vichan-devel/

Oekaki

vichan makes use of wPaint for oekaki. After you pull the repository, however, you will need to download wPaint separately using git's submodule feature. Use the following commands:

git submodule init
git submodule update

To enable oekaki, add all the scripts listed in js/wpaint.js to your instance-config.php.

WebM support

Read inc/lib/webm/README.md for information about enabling webm.

vichan API

vichan provides by default a 4chan-compatible JSON API. For documentation on this, see: https://github.com/vichan-devel/vichan-API/ .

License

See LICENSE.md.