I would hire a new intern for this project. You should have fired him the last time you put these crappy forums up but to let them continue to strip ALL usability from a forum is a new level of fail on CCP's part.

I said it earlier. HTTPS implementation was merely a patchwork because CCP has nobody versed in forum security. Instead of learning something or hiring someone who knows something, they simply went with HTTPS. Hint to CCP: https is designed for specific instances. Unless you are sharing sensitive financial information with this site why the hell are you using https instead of programing proper scrubs, checks, and simple urls.

Browsing the forum with your url structure I've learned quite a bit about your database structure since you expose so much in the url. This thing will likely be taken down with some injection attacks which your https scheme can't stop. You need proper coding. Oh don't say you can't do simple urls, I've looked at the highlights of yaf and simple urls is one of their listing points (not selling point since it is freeware). instead you don't know how to implement or chose not to when you really messed with the coding.

edit: open the pages in a simple DOM viewer. almost all your code is plain text, you only used obfuscate on direct path in the code. OMG why would you put full paths in your publicly view-able code??