If you've followed my Twitter or MastoArt accounts, you might have seen me complaining about having to go knee-deep into the comic's code.
Here's the situation:
- My old boss got an email about some suspicious files on my server (we have the same host & he's my backup contact). He gets a hold of my 'cause my email clients thought this was spam - rightfully so. It is, as the kids say, "Super Sus".
- I Check. Sure enough, the files were ancient backups that I had from like 20 years ago. I scrub the files and make another pass.
- This got me looking deeper into the email. Our host found old bad files... but the email was talking about a possible cross-side scripting exploit. Into the Code I Go! >.<
The code I use to run this site is called webcomicConfig. It's not the vanilla code from 2003 (Yes... 2003!). It's been worked on by myself and others to make it somewhat functional. One thing I Never thought to look into was how the Newspost code works.
Thanks to time, things like XSS can be mitigated with some code. Not squashed by Any means but it'll get most scripting programs with security scanners to not yell at you anymore.
My level of PHP is... Terrible. -.-
I know enough to get myself in trouble. Although I still plan to switch to a completely different CMS in the future, I want to fix this before I leave it to the next crew of cartoonists.
My two biggest wants are to add in a simple Rich Text or Markup editor for the newsposts and to make it absolutely useful in the latest PHP versions (at the very least making it to later versions of PHP7). The former is just a basic Quality of Life addition. The latter is a necessity, honestly.
If you can help, drop and comment and let me know! I need it!
Anyhoo! I'm off to stretch and keep picking at a pic I've been working on the past few days. Happy Easter/Happy Sunday! = )
Remember: Stay Safe. Wear a Mask. Get vaccinated if you can. Get a booster if you're already good on all that. And remember to keep your head up.
'Till next time! = )
*Poof*