User CP now also shows total posts and total online time
Improved:
Correctly commented core-modifications
Moved code to where it actually belongs (aka not the Core)
Upgraded the forum software
Fixed:
Login form ignoring captcha
Vouches show properly again
You could inject XSS-Codes in your threads
You could steal a users credits by sending him a certain link
You were able to see private threads (Ask Staff, Appeals ...) on other members profiles.
Users were able to open certain files on our server that they weren't supposed to see
Other stuff: Before you ask: No, we won't tell you how those injections worked. Some of the changes above were made last month already. Or the month before that? Idek anymore. I just made them public today because I was working on some more fixes anyway.
Anyway, you know what's great? Now that I opened one nightcore song my whole youtube recommendations are filled with nightcore and K-Pop again, even tho I was watching like documentaries and gameplay videos for one month straight now. FML.