I'm currently revisiting the BOINCstats web code and bringing it up to date with current security measures and fixing thing I did wrong before (still learning new tricks).

So far:

• Changing all database queries to use prepared statement. All database access was already secured but using prepared is better.
  
• Using default validate functions in addition to functions I made myself
  
• Fixed a bunch of old code which was inefficient or just plain stupid
  
• Changed caching from file-based self written code to memcached. My cashing was sometimes not properly expiring thus returning invalid data.
  
• Updated password hashing
  

Todo list:

• Still lots of code left that needs to be changed to prepared and validation updated
  
• Allowing using different passwords for projects instead of using the BAM! password for everything
  
• Fix avatars
  

While working on it some things may break. I test everything as much as possible before pushing it online however sometimes something slips through. I'm apprised of all errors so I'll get around to fixing them.

Sounds good
Could you add the avatar-problem to the to-do list as well? Not a big deal though.
(It's just black when we change it).

Avatar upload now works.

Tried again using Brave Browser, and Firefox. On Linux Mint 21.1. Still the same. I can select a picture, but path to picture doesn't show in the box. And it still appears black.
Will try in Winblows later, to see if it's working there.

Allowing using different passwords for projects instead of using the BAM! password for everything -> now available.

Thanks for the good work you do here, Willy.