I'm pretty sure you can easily get a SHA hash generator working on this site in no time. Wikipedia has a great example,

https://en.wikipedia.org/wiki/Hash_function

Super easy to set up hashes, you just generate it and store it instead of a password on the server. The server takes the password, hashes it, stores it, and uses it for verification later. 

Func is php so the simple password_hash() would be the best choice. Every thing else requires knowledge.

I would be more interested in HTTPS still. 

But would be pretty hard to implement now. Honestly, SHA is super easy to implement, especially since Spirit mentioned a function just for it in php. Honestly, just a days work really. HTTPS should be a later goal, but getting rid of the password storage system should be top priority. 

...and please block Tor exit nodes IPs for non-registered users. Someone posting here through Tor usually has bad intentions. 

Please don't. Tor is a great tool to protect your privacy especially with func's stupid public IP display. It's no one's business. 

Go hash that shit! 

Just don't make a hash of it. 

Changing the password doesn't work, either. 

Have to check new php versions, when released they sometimes decide to depreciate some older codes, but I dont think they messed with sendmail in a while that ones too dangerous.

Gmail will sometimes reject mail unless the sender is now, IPV6 friendly..and you have IPV6 enabled on the sendmail server. I turned it off and only have IPV4 , so the mails can go thru. 

Nevermind. Changing the password does work after all. It just requires enabling the http referer. 

Are you using a separate webserver, or are you self hosting? 

How I make quotes for text looking white in this website? 

Be sure to check out the FAQ as well. 

it works finally 

I love func_msgboard but since day one it's annoyed me that I have to click every single image link to actually see the image. If you're like me, create a bookmarklet and use this bit of javascript as the URL:

-----
javascript:!function(){function e(){(window.myBookmarklet=function(){$('a[href$=".gif"], a[href$=".jpg"], a[href$=".png"], a[href$=".jpg:orig"]').each(function(){var e=$(this).attr("href");$(this).replaceWith('<img src="'+e+'" width="100%" height="auto"></img>')})})()}if(void 0===window.jQuery){var t=!1,a=document.createElement("script");a.src="https://ajax.googleapis.com/ajax/libs/jquery/3.1.0/jquery.min.js",a.onload=a.onreadystatechange=function(){t||this.readyState&&"loaded"!=this.readyState&&"complete"!=this.readyState||(t=!0,e())},document.getElementsByTagName("head")[0].appendChild(a)}else e()}();
-----

(I promise this isn't spyware or anything nasty, just code to replace hrefs with images and some jQuery loading preamble.)

Load a thread, click the bookmarklet and every image link will become an inline image. 

 

When you try to post a backslash, the character gets swallowed up. This makes it hard to include the Quake literal for a newline character in a string, as I tried to do in a post on using info_command_spawn. I guess it might be sanitation or html parsing getting confused. Is there any workaround possible, like allowing use of the html entity &92; 

based on previous bug reports, it was only the preview function that would steal your slashes.

//
/ 

\\
\ 

i forgot my pw long ago.

LOL

Admins, please, reset MFX password. 

Someone from Facebook is getting an error 71. Can anyone help? 

ah... that means they have the same IP as a previous spam post.

I could relax that rule, maybe block IPs only for a week or something. 

okay, i disabled that check, tell that person they can try again now. 

Do we need a captcha for anonymous users or something? this spam is getting out of hand.