| Railway Preservation News https://www.rypn.org/forums/ |
|
| RyPN was Definitely Attacked https://www.rypn.org/forums/viewtopic.php?f=1&t=17466 |
Page 1 of 1 |
| Author: | rypnorg [ Tue May 17, 2005 12:04 am ] |
| Post subject: | RyPN was Definitely Attacked |
Somebody deleted all the posts in the RyPN Interchange database.We are not sure how they gained entry, but they apparently had access to the Interchange admin page and used the pruner (built in function capable of deleting all the posts in one command).We did a backup last night but in the process of trying to restore the database we found our back up software has a problem. It apparently can only back up 5 megs at a shot, and the database was 17 megs when the attack happened.What's worse, is the 5 megs that did get backed up are the oldest stuff, the newer stuff, as in the last 5-6 months is gone.Our only hope at this point is that our host provider, Interland, can restore the database from some period of time shorter than the last 5-6 months. Based on my knowledge of the Interland Mysql service I am not optimistic.So, we changed the passwords. Not sure that will stop covert access, but nothing else we can do at the moment. Tomorrow, we will contact Interland and enquire about the possibility of restoration. If they can't do a restore we will restore what we have, and figure out a reliable way to do complete back ups.That's the sad news. We'll update more as we get info.The board is now unlocked. We will attempt to save any new posts that may occur between now and whenever and whatever restoration is made.Hume Kading |
|
| Author: | steaminfo [ Tue May 17, 2005 4:20 am ] |
| Post subject: | Re: RyPN was Definitely Attacked |
If you're really running unpatched V2.09 of phpBB, then you're completely vulnerable to a variety of exploits whether or not you've changed the admin password.You need to upgrade to Version 2.15 of phpBB asap.We currently support 12 copies of phpBB and it has been a security nightmare for us.Regards,Doug |
|
| Author: | Hume Kading [ Tue May 17, 2005 7:25 am ] |
| Post subject: | Re: RyPN was Definitely Attacked |
Well, we have installed at least one patch. But, I think you're right, an upgrade is in order, and this may be the time to do it. |
|
| Author: | scottychaos [ Tue May 17, 2005 7:43 am ] |
| Post subject: | Re: RyPN was Definitely Attacked |
If it helps, the "wayback machine" has a record of posts from 1998-2004.http://web.archive.org/web/*/http://www.rypn.orgit doesnt have Novemner 2004 to present, but at least its something.scot |
|
| Author: | steaminfo [ Tue May 17, 2005 8:10 am ] |
| Post subject: | Re: RyPN was Definitely Attacked |
After this is all settled, I'll be happy to provide you with access to a MySQL server that is NOT connected to a phpBB where you can regularly back up the rypn database, no charge.If your host isn't doing proper backups of your database(s) you should use a number of short, harsh words in discussing this issue with them.Regards,Doug |
|
| Page 1 of 1 | All times are UTC - 5 hours [ DST ] |
| Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group http://www.phpbb.com/ |
|