Quote from criple_ripper
Oct 21, 2012 - 15:06:40
But as you already know it needs a very careful setup because there could be attack vectors that go beyond the challenge and could result in bringing down your site..That's why many result in simulating solution queries which i don't think would work in this case..
As I think already nearly happened after talking to dloser
The challenge was up briefly then taken down after it was deemed unsafe - Wixxerd: I suggest having challenges beta tested before putting them online, but be sure your testers are up to the job.
Without meaning to volunteer anyone, you need to be looking to the like of dloser, tehron, criple_ripper and people of this calibre in order to get a thorough test done.
If you find time, head onto the irc (server: irc.idlemonkeys.net channel: #wechall) and ask around there, most of us are happy to help and we're available there a lot more than we are available here
As you know, I too am happy to help out where I can (depending on my work situation) so drop me a line, and good luck with getting this fixed