WeChall v4

I fixed some minor bugs:

- PageMenu in forum was floated left.
- ChallengeTagCloud used the wrong orderby

Also i added 3 more challenges:

Training: Regex is a regular expression training challenge, because i think there should be one.
Gizcrypt is a crypto challenge, using some simple xor cipher. The same cipher is used in the Snake challenge.
The Last Hope is our first linux crackit challenge from bsdhell.

Also i announced the WeChall4 contest, which applies to all challenges released until now

Happy Challenging!

There's an annoying layout issue in the forum: If you hover over the page numbers of a thread with multiple pages, everything below is offset by one pixel and if you move out it jumps back again. Seen with Firefox and Opera, but not IE.

Layout bug should have been fixed. Thanks for the report

The problem was


Which renders fine in firefox here, but Opera indeed has a problem with that.

I still work a lot on wechall4 and here are the latest changes:

[+] private history. You can hide now your latest activity a bit, by hiding your date. Check Account->WeChall Settings (thx tehron)
[+] user history is now multi language, an API will follow to poll a user history in a more machine readable format
[+] better performance for score changing events. (Please report anomalies in your logfiles, as the scoring algo is new code)

beside that there were a few smaller fixes not worth mentioning.

Happy Challenging!

tehron found a private information disclosure.

You could simply type usernames to get their main email address in module PasswordForgot.

This has been fixed!

Nice finding and thank you, Sire ;)

Uploaded latest version of all stuff. wechall.zip is also up-to-date again.

The Password Recovery was still buggy for old users that have not logged in at least once. There was a problem with unconverted passwords. Thank you Unhandled!

I updated the join.php pages and put those in 3 sections.
New is an WeChall API Section, with scripts you can use for your own means.
Threre is also a complete new script to poll the latest activites, which is experimental now.
Thanks to the guys at http://yashira.org for this idea.

If you want to exclude your account from these API calls you can disable that in Account->WeChallSettings, where you can also set a password for your API calls, to allow only yourself and friends to track you.

Also i like to thank and mention HaDeS who submitted bugfixes for the spanish translations.

Edit: Also the guys at yashira discovered that wechall does not record your onsiterank on the sites. This has also been fixed and we now record the onsiterank for around 15 sites. As soon as we collected enough data, this will be used in some tables and maybe graphs as well.

Again i have uploaded some changes.

As you hopefully know, people can start their own usergroups, which allows them to have an own private board in the forums.

I added some more functions to these groups, including:

[+] You can now assign Co-Leaders and Moderators for your group, and also hide some members if you like to.
[+] There are 2 new checkboxes to control the basic visibilty in the group- and memberlist.

I like to thank Jinx for these suggestions and feedback.

Beside that i fixed an important bug in the forums. You were able to read all forum posts, because the EditPost function did not check for the correct permissions. Of course this has been fixed. Hopefully and probably i was the first who found that bug

HackBBS still fails to update

Thanks for the report.
I checked all sites if they are working and update for HackBBS should work again now.

Edit:

I accidently broke the update for HackBBS because it will also submit onsiterank soon, but i made a mistake.

Btw, i just changed the personal guestbook to require 2 points to get created by a user, because some funny spammer thought spam your own guestbook is funny
The fraudulent user got permanently banned and it`s guestbook disabled.

I have uploaded the latest version of wechall4.
I also created the new changes.txt

/changes.txt

Mon, 27th Sep. 2010

[+] Show amount of thanks/thumbs in forum post userdata. Also always show this for posts.
[+] New API for users and sites (thx TheHiveMind) (thx yashira.org)
[+] Some albanian translation (thx poppaj)
[+] A lot of fixes for finnish tranlsation (thx ???)
[+] Make MibbitIRC use SSL (thx HellboundHackers)

[x] Now the userrecord counts for logged in members only
[x] You could easily reach 64kb session data with CSRF_Tokens (thx noother)
[x] modules/Admin/method/UserEdit.php could not change your email (thx Xeo)
==================================================================================
Sun, 26th Sep. 2010

[x] The solution to PHP0816 was spoiled in the sourcecode (thx noother)
[x] Disabled country detection upon registration because of information disclosure (thx ph0enix)
==================================================================================
Thu, 23th Sep. 2010

[x] Moderating guestbook messages was broken. (thx shadum)
[x] Fixes for spanish lang files (thx HaDeS)
==================================================================================