* Update functions.php ` $_SERVER['REMOTE_ADDR']` was hardcoded in ban lookup instead of `$ip` variable * Fix information leak in thread.html Sensitive information can be leaked due to inadequate/absent escaping. Line 14 is truncating before removing tags, this can cause some tags to be cut and therefore not be removed by the `remove_` functions. Line 22 is just leaking it all, not removing anything. * Fixed thread template `remove_markup` is not available on vichan, arguably it makes things better but it's out of scope for this CHANGE, removing modifiers is enough to stop the info leak consider adding it again after pulling: fallenPineapple@a5b3336 also moving truncation before escaping for extra safety
|1 month ago|
|inc||1 month ago|
|js||1 month ago|
|static||6 years ago|
|stylesheets||3 years ago|
|templates||1 month ago|
|tmp||4 years ago|
|tools||4 years ago|
|.gitignore||5 years ago|
|.gitmodules||9 months ago|
|LICENSE.Tinyboard.md||6 years ago|
|LICENSE.md||2 years ago|
|README.md||1 year ago|
|banned.php||5 years ago|
|install.php||2 years ago|
|install.sql||3 years ago|
|log.php||4 years ago|
|mod.php||3 years ago|
|player.php||6 years ago|
|post.php||1 year ago|
|report.php||4 years ago|
|search.php||9 months ago|
|smart_build.php||4 years ago|
Vichan has next to no active development, however you can still pay for support. Basic support costs $40/hr, and is only payable in BTC. New features depend on what you want. Email COPYPASTE <AT> KITTENS <DOT> PH if you’re interested—Vichan forks such as OpenIB are included in this offer.
vichan is a free light-weight, fast, highly configurable and user-friendly imageboard software package. It is written in PHP and has few dependencies.
In November 2017, Marcin Łabanowski (@czaks) retired as maintainer for personal reasons. His retirement may be temporary, but in his absence, Fredrick Brennan (@ctrlcctrlv), co-maintainer since 2013, and #3 in terms of number of commits, took his place as interim sole maintianer and point of contact. (See issue #266)
Security problems can be reported to Fredrick Brennan at his email: COPYPASTE <AT> KITTENS <DOT> PH.
Vichan is still accepting patches, but there is at the moment no active development besides fixing security problems and other serious bugs as they emerge. Given the lack of active development, we strongly urge you to consider other imageboard packages. It is the opinion of the vichan development team that no new vichan imageboards should be deployed, and other imageboard packages, such as lynxchan, used instead.
vichan is a fork of (now defunc’d) Tinyboard, a great imageboard package, actively building on it and adding a lot of features and other improvements.
Some documentation may be found on our wiki. (feel free to contribute)
We try to make sure vichan is compatible with all major web servers. vichan does not include an Apache
.htaccess file nor does it need one.
You can contribute to vichan by:
Download and extract vichan to your web directory or get the latest development version with:
git clone git://github.com/vichan-devel/vichan.git
install.php in your web browser and follow the
vichan should now be installed. Log in to
mod.php with the
default username and password combination: admin / password.
Please remember to change the administrator account password.
See also: Configuration Basics.
To upgrade from any version of Tinyboard or vichan:
git pull to update your files, if you used git, or
inc/instance-config.php, replace all your files in place
(don’t remove boards etc.), then put
inc/instance-config.php back and
To migrate from a Kusaba X board, use http://github.com/vichan-devel/Tinyboard-Migration
vichan is still beta software -- there are bound to be bugs. If you find a bug, please report it.
There are a few command line interface tools, based on Tinyboard-Tools. These need
to be launched from a Unix shell account (SSH, or something). They are located in a
You actually don’t need these tools for your imageboard functioning, they are aimed at the power users. You won’t be able to run these from shared hosting accounts (i.e. all free web servers).
vichan makes use of wPaint for oekaki. After you pull the repository, however, you will need to download wPaint separately using git’s
submodule feature. Use the following commands:
git submodule init git submodule update
To enable oekaki, add all the scripts listed in
js/wpaint.js to your
inc/lib/webm/README.md for information about enabling webm.
vichan provides by default a 4chan-compatible JSON API. For documentation on this, see: https://github.com/vichan-devel/vichan-API/ .