I'm not incredibly concerned about the password issues (though obviously they are a concern for people who use their accounts a bit more than me), but the fact we aren't running SSL on pages is both weird, bad, and
bad for ad revenue.
Just a reminder to the admins - SSL is one of the deciding factors used by Google for working out your website rank. It's not hard to have and is definitely advisable. It also stops all your users from being tracked to every single page they go on.
Oddly, doing a quick SSL lookup shows that there is in fact a SSL cert for getdare:
https://www.sslshopper.com/ssl-check...tdare.com/bbs/
But Chrome is reporting these pages as insecure.
If the website is to continue, I think it really does need a bit of a security spruce-up and some updates. I'm also willing to help as a security-centred web developer if you guys are interested.