Many Site Changes
Posted by
on Wednesday June 24, 2026 at 9:36 pm
I've gone through and re-wrote most of the site code, although the basic premise of the site is the same we have updated most of the backend code:
Read More
- Ensured that phpBB was up to date
- Re-wrote most of the backend code
- Worked on Security of the back-end
- Removed reliance on phpBB for security
- Kept some of the old theming
- Added Bootstrap style to site
- Updated PHP code and Security
- Removed the use of $_GET and $_POST
- URL / slugs restricted to safe characters
- Attempted to protect forms
- Admin forms use tokens/keys
- Delete/restore actions use link hashes
- Invalid form submissions are rejected
- Database safety
- Queries use $db->sql_escape()
- Insert/update data uses $db->sql_build_array()
- IDs are cast to integers
- Duplicate slug checks prevent conflicting article routes
- Output Escaping
- Admin output cleaned up
- Public article output uses escaping helpers
- Code blocks are escaped before display
- URLs/images are constrained and escaped
- Content Control
- Articles have is_active, so bad/old entries can be disabled instead of deleted.
- Images URLs are validated in admin as either valid URLs or local paths
- There is now Audit Logging on the site.
Many Site Changes
Happy 22nd Anniversary TheRegs.org
Halloween Season