why the change in the style of the forum ????????????????
hope its nothing nasty again
whats happened now
Moderator: Moderators
whats happened now
2004 Iron Grey 407se 136bhp......Written Off
2006 Moonstone blue 407 se 136 bhp.....Written off
2006 silver 407 SW..........replacement
-
steve_earwig
- Moderator
- Posts: 19813
- Joined: Thu Oct 04, 2007 6:09 pm
- Location: Jastrebarsko, Croatia http://www.jastrebarsko.hr/lokacija/
Re: whats happened now
There's something in the Welcome forum viewtopic.php?f=17&t=3692, looks like Nick's having a bad day. Again.
Unskilled meddling sin©e 2007
The submitted form was invalid. Try submitting again.
The submitted form was invalid. Try submitting again.
Re: whats happened now
I think our friend has been at it again.
Saw something this morning and it appears he/she is now leaving clues.
Don't know if this is the back-up or the new board, I guess all will be revealed anon.
Saw something this morning and it appears he/she is now leaving clues.
Don't know if this is the back-up or the new board, I guess all will be revealed anon.
-
nick
- Site Admin
- Posts: 340
- Joined: Wed Jul 27, 2005 8:59 pm
- Location: Glasgow, Scotland, UK
- Contact:
Re: whats happened now
Okies - Seems like the best place to post this...
Our dear friend was at it again. They changed one of my posts and left a small "clue" about the existing (apperently) security hole in the forum..
The message said he had used the same exploit as last time (SQL Injection using the links module).
Since I deleted that file, there was no way thats what could have been used.
I recieved the heads up from Niz, and was out crimbo shopping with the wife. I've never ran to an internet cafe so fast in all my life. I took the board down alltogether, while pondering what to do.
I called Niz, and advised him I was updating the forums to phpbb3 as stop gap till I figure out what to do next..
Niz advised that it may have been partially googles fault the site was hacked (using the wonderful google cache function) to access the now non-existant file..
TBH - It was partually my fault. I didnt change the DB password as I didnt think it was required. I didnt envision google being used to this extent..
As a result, I upgraded the forum software, moved the database to a new server, and have set up a new username and password. Because this forum uses a completley different data structure to the old version, and because of the usernames/mysql server and password have been changed, that should be the last we see of them.
I'm now contemplating what to do. I'm going to speak to Niz about it in depth over the next couple of days to see where we can head with this. I'll post more info when we make some decisions..
As an added bonus, All the database backups were working correctly - I set up a script to double back them up in differnet locations, and to email them to me, just to be on the safe side (Read paranoid)...
Right now, I have everything backed up - everyones original points, garage items, photo gallery images, everything - the only thing is I'm not enabling any addons in this forum just now till I can be sure theyre security vetted..
If anything needs anything from the old forum, give me a shout and I'll dig it out..
N
Our dear friend was at it again. They changed one of my posts and left a small "clue" about the existing (apperently) security hole in the forum..
The message said he had used the same exploit as last time (SQL Injection using the links module).
Since I deleted that file, there was no way thats what could have been used.
I recieved the heads up from Niz, and was out crimbo shopping with the wife. I've never ran to an internet cafe so fast in all my life. I took the board down alltogether, while pondering what to do.
I called Niz, and advised him I was updating the forums to phpbb3 as stop gap till I figure out what to do next..
Niz advised that it may have been partially googles fault the site was hacked (using the wonderful google cache function) to access the now non-existant file..
TBH - It was partually my fault. I didnt change the DB password as I didnt think it was required. I didnt envision google being used to this extent..
As a result, I upgraded the forum software, moved the database to a new server, and have set up a new username and password. Because this forum uses a completley different data structure to the old version, and because of the usernames/mysql server and password have been changed, that should be the last we see of them.
I'm now contemplating what to do. I'm going to speak to Niz about it in depth over the next couple of days to see where we can head with this. I'll post more info when we make some decisions..
As an added bonus, All the database backups were working correctly - I set up a script to double back them up in differnet locations, and to email them to me, just to be on the safe side (Read paranoid)...
Right now, I have everything backed up - everyones original points, garage items, photo gallery images, everything - the only thing is I'm not enabling any addons in this forum just now till I can be sure theyre security vetted..
If anything needs anything from the old forum, give me a shout and I'll dig it out..
N
Thanks,
Nick
Nick
DaiRees wrote:I got the "premium" standard fit system in mine, 10 speakers, changer, JBL amp. I'm quite happy with it for listening to the radio / CDs or my "teach yourself Welsh" stuff on the way to work
Re: whats happened now
The extremes some people will go to cause disruption is unbelievable.nick wrote: Niz advised that it may have been partially googles fault the site was hacked (using the wonderful google cache function) to access the now non-existant file..
Well done lads, hope everything goes well from hereon.
ps. Nick. Hope you didn't spend tooooooo much on my crimbo pressie.
