Due to a security hole involving CSRF (Cross Site Request Forgery) all image tags have been disabled across the site until further notice. This flaw was discovered and tested by myself so nobody got the chance to exploit it.

The short story is I wrote a small script and hosted it on an external server, then linked to it with an image tag in a forum post. The end result with a bit of fancy code was that anybody viewing the thread would see a dead linked image and leave their gang without any indication to them as to what happened. This could also be exploited to remove flags, force people to buy items from a market stand, etc. A fix for this exploit is currently being coded.

Few things to mention, firstly the 'Last chance saloon!' secret achievement is being removed and replaced with a new and different achievement. The reason for this is it was never coded to work with multiple rat bets and as such bugs out giving the achievement to people who have not earned it.

The 'Rat Race!' achievement is apparently still not working correctly, I'll be looking in to that later. New map at the end of this month, positions will be posted in a couple of weeks. The webserver will be down for a few minutes later today while we run some security updates and the new attack system will be up for partial testing on Dev in a week or two.

Yesterday we randomly got hit by spam bots on our wiki, we have reverted all the damage done to main and user pages so nothing should be left. To make sure that doesn't happen again I have blocked certain HTML expressions on the wiki. They shouldn't really stop you editing as they're ones that are never used on a wiki but widely used by bots. If you do have any issues and get blocked make a ticket and paste the error you got.

Also as an added precaution we have removed every staff email from pages and removed some user email. If you have saved an email onto your page we highly suggest you remove it. Otherwise you run the risk of getting it copied by a crawler then being spammed until the bot dies/email is removed from the list.

Achievement values have been remade. We want the score to be comparative to the difficulty of an achievement across all categories. As such many referral achievements have seen their values increased while a lot of easy casino achievements have had theirs dropped.

I think everyone should appreciate how hard some of the referral ones are to get and respect how much they are worth because of it. Some of the casino ones that sounded challenging on paper have turned on quite easy to get. Especially ones like the slot machine achievements.