[mega-thread] Glitchchord- mongoDB discord clone

Just for the purpose of letting the community know the issue:

It was possible to perform XSS attacks in the chat, which now should be resolved!


thanks to @ihack2712!

1 Like

Alright, some of you may see an error. This is because we updated our dependencies. As I type we are rewinding changes to node packages. Thank you

here is what we are doing to make it better for you:

  1. adding usernames to your account if you forget
  2. adding new features
  3. removing security-risk parts

what we have done so far:

  1. took away feature that shows outsiders invites to private groups
  2. added external video chat via webRTC
  3. added usernames to accounts that don’t have any
1 Like


    43|                     <% channel.message.forEach(function(message){ %>
    44|                         <div class="chat-message">
 >> 45|                                 <div class="avatar"><img src="<%= message.author.profile_picture %>" /></div>
    46|                                 <div class="chat-message-content">
    47|                                     <a href="/users/<%= message.author._id %>" class="chat-message-author"><%= message.author.username %></a>
    48|                                     <span class="chat-message-date"><%= moment(message.created_at).format("lll")  %></span>

Cannot read property 'profile_picture' of null
    at eval (/app/views/chat.ejs:131:41)
    at CoreMongooseArray.forEach (<anonymous>)
    at eval (/app/views/chat.ejs:128:24)
    at chat (/rbd/pnpm-volume/f4d4184e-a21b-40de-a0bf-e3d9b5cee16c/node_modules/.registry.npmjs.org/ejs/2.7.4/node_modules/ejs/lib/ejs.js:682:17)
    at tryHandleCache (/rbd/pnpm-volume/f4d4184e-a21b-40de-a0bf-e3d9b5cee16c/node_modules/.registry.npmjs.org/ejs/2.7.4/node_modules/ejs/lib/ejs.js:254:36)
    at View.exports.renderFile [as engine] (/rbd/pnpm-volume/f4d4184e-a21b-40de-a0bf-e3d9b5cee16c/node_modules/.registry.npmjs.org/ejs/2.7.4/node_modules/ejs/lib/ejs.js:485:10)
    at View.render (/rbd/pnpm-volume/f4d4184e-a21b-40de-a0bf-e3d9b5cee16c/node_modules/.registry.npmjs.org/express/4.17.1/node_modules/express/lib/view.js:135:8)
    at tryRender (/rbd/pnpm-volume/f4d4184e-a21b-40de-a0bf-e3d9b5cee16c/node_modules/.registry.npmjs.org/express/4.17.1/node_modules/express/lib/application.js:640:10)
    at Function.render (/rbd/pnpm-volume/f4d4184e-a21b-40de-a0bf-e3d9b5cee16c/node_modules/.registry.npmjs.org/express/4.17.1/node_modules/express/lib/application.js:592:3)
    at ServerResponse.render (/rbd/pnpm-volume/f4d4184e-a21b-40de-a0bf-e3d9b5cee16c/node_modules/.registry.npmjs.org/express/4.17.1/node_modules/express/lib/response.js:1012:7)
    at _clear (/rbd/pnpm-volume/f4d4184e-a21b-40de-a0bf-e3d9b5cee16c/node_modules/.registry.npmjs.org/req-flash/0.0.3/node_modules/req-flash/index.js:18:9)
    at User.findById.populate.then (/app/routes/channel.js:129:17)
    at process._tickCallback (internal/process/next_tick.js:68:7)```

@internetuser our community server was destroyed by a user shortly after we banned them, the issue has been fixed but please join our new server at:


old one has been deleted due to corruption

1 Like

Lmao did banning smurf break it?

alright, it broke it.

she had left such a mark in the server that it didn’t want to go on without her


  • username added on signup to prevent DB issues (thanks to ihack2712!)
  • admin features for specified people
1 Like

You welcome! :smiley: Always happy to help :wink:


This server has been made to discuss the ongoing pandemic:

You must not post rumours, lies or fearful comments in this room. A moderator will be overseeing the room

update: delete your account is now available!

how it works:

  1. you press the red button in your profile to delete
  2. your account will be marked for deletion
  3. all data (messages, user info etc) will be cleared

to revert, simply sign back in before we notice


thanks to ihack for setting up a profanity filter!

To prevent addiction or to give time to cool down, we have now introduced a 60 second ‘rest mode’ that can be found in the members column of your group.

By pressing the moon, it emits a 60 second timer- giving you time to have a rest or think.


major updates!

  • markdown support!
  • status feature!

We all gonna use this now instead of Discord?

I tried to login to my existing account, it just redirected me to the Register page

Yeah. Same with me. (more text)

Please make sure that you have:

  • entered the correct email
  • entered the correct password

@TheBigC @LukaGamingDev if you have forgotten your password, PM me

PS: i have sent out PM’s with your user info for help, passwords remain encrypted

Pretty sure i got it right since i use a Password Manager.