From 56b86a7abb0addc79ca1efa7a5e58e6ca2118b05 Mon Sep 17 00:00:00 2001
From: Jake Jarvis <jake@jarv.is>
Date: Thu, 19 Sep 2019 01:38:02 -0400
Subject: [PATCH] add most embarrassing snippets

---
 README.md | 104 +++++++++++++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 103 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index bfafb9c..f347c1d 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,6 @@
 
 <p align="center"><img src="images/readme-badges.png" width="540"></p>
 
-
 A PHP4-based bulletin board creatively titled **Jake's Bulletin Board**. This was my first-ever full programming creation back in 2003 (if you couldn't tell) saved for posterity after being rescued from a dust-caked floppy disk.
 
 ## Usage
@@ -15,6 +14,109 @@ If you're bored on a rainy day, potential activities could include:
 - Actually getting this to run in 2019.
 
 
+## Embarrassing Highlights
+
+Who cares if somebody wants to delete a post with the ID "`*`" no matter the author? ([delete_reply_submit.php](https://github.com/jakejarvis/jbb/blob/87b606797414b2fe563af85e269566fc5e076cc5/delete_reply_submit.php#L9))
+
+```php
+  $query2 = "DELETE FROM jbb_replies
+WHERE replyID ='$replyID'";
+$result2 = mysql_query ($query2)
+        or die ($query2); 
+```
+
+Sessions based on storing an auto-incremented user ID in a cookie. ([login_submit.php](https://github.com/jakejarvis/jbb/blob/87b606797414b2fe563af85e269566fc5e076cc5/login_submit.php#L28))
+
+```php
+session_id($user->userID);
+session_start();
+$_SESSION["ck_userID"] = $user->userID;
+$_SESSION["ck_username"] = $user->username;
+$_SESSION["ck_groupID"] = $user->groupID;
+```
+
+Viewing a "private" message based solely on a sequential message ID. ([pm_view.php](https://github.com/jakejarvis/jbb/blob/87b606797414b2fe563af85e269566fc5e076cc5/pm_view.php#L13))
+
+```php
+$query1 = "SELECT * FROM jbb_pm WHERE pmID = '$pmID'";
+```
+
+Incredibly ambitious emoticon and [BBCode](https://en.wikipedia.org/wiki/BBCode) support. I honestly can't begin to explain this logic. ([functions.php](https://github.com/jakejarvis/jbb/blob/87b606797414b2fe563af85e269566fc5e076cc5/functions.php#L18))
+
+```php
+$replacement = '<IMG SRC=images/emoticons/smile.gif>';
+$replacement2 = '<IMG SRC=images/emoticons/bigsmile.gif>';
+$replacement3 = '<IMG SRC=images/emoticons/frown.gif>';
+$replacement4 = '<IMG SRC=images/emoticons/crying.gif>';
+$replacement5 = '<IMG SRC=images/emoticons/blush.gif>';
+// ... yada yada yada ...
+$replacement21 = '<a href="';
+$replacement22 = '">';
+$replacement23 = '</a>';
+$replacement24 = '<FONT COLOR="';
+$replacement25 = '</FONT>';
+$replacement26 = '<FONT SIZE="';
+$replacement27 = '<BR>';
+
+$topicval = str_replace(':)', $replacement, $topicval);
+$topicval = str_replace(':D', $replacement2, $topicval);
+$topicval = str_replace(':(', $replacement3, $topicval);
+$topicval = str_replace(':crying:', $replacement4, $topicval);
+$topicval = str_replace(':blush:', $replacement5, $topicval);
+// you get the point...
+$topicval = str_replace('[URL=', $replacement21, $topicval);
+$topicval = str_replace(':]', $replacement22, $topicval);
+$topicval = str_replace('[/URL]', $replacement23, $topicval);
+$topicval = str_replace('[FONT COLOR=', $replacement24, $topicval);
+$topicval = str_replace('[/FONT]', $replacement25, $topicval);
+$topicval = str_replace('[FONT SIZE=', $replacement26, $topicval);
+$topicval = str_replace('
+', $replacement27, $topicval);
+
+// repeated five more times throught the code...
+```
+
+Saving new passwords as plaintext — probably the least problematic problem. ([register_submit.php](https://github.com/jakejarvis/jbb/blob/87b606797414b2fe563af85e269566fc5e076cc5/register_submit.php#L10))
+
+```php
+$query = "INSERT INTO jbb_users (username, password, email, avatar) VALUES ('$username','$password','$email','images/avatars/noavatar.gif')";
+```
+
+I guess I gave up on counting `$query`s by ones...  ([functions.php](https://github.com/jakejarvis/jbb/blob/87b606797414b2fe563af85e269566fc5e076cc5/functions.php#L231))
+
+```php
+while ($topic = mysql_fetch_object($result30)) {
+    $query40 = "SELECT * FROM jbb_users WHERE userID = '$topic->userID'";
+    $result20 = mysql_query($query40)
+        or die ($query40);
+		
+    $query50 = "SELECT * FROM jbb_replies WHERE replyID = '$replyID'";
+    $result50 = mysql_query($query50)
+        or die ($query50);
+
+    $reply = mysql_fetch_object($result50);
+
+    $query60 = "SELECT * FROM jbb_users WHERE userID = '$reply->userID'";
+    $result60 = mysql_query($query60)
+        or die ($query60);
+
+    $user = mysql_fetch_object($result60);
+
+    $query7 = "SELECT * FROM jbb_topics WHERE userID = '$reply->userID'";
+    $result7 = mysql_query($query7)
+        or die ($query7);
+
+    $query8 = "SELECT * FROM jbb_replies WHERE userID = '$reply->userID'";
+    $result8 = mysql_query($query8)
+        or die ($query8);
+
+    $usertopics = mysql_numrows($result7);
+
+    $userreplies = mysql_numrows($result8);
+}
+```
+
+
 ## Screenshots
 
 ![Installation](images/readme-screen1.png)