Hard Light Productions Forums
Announcements => Announcements => Topic started by: Sandwich on November 07, 2012, 08:26:32 am
-
So we had a security issue around here, but thanks to quick action by Zacam and rev_posix, things are back up and running. However, we still need to address some things, and while we could take the site/forums offline while we fix them, there's not much point considering what we'll be doing. So, excuse the existing wonkyness, and thanks for understanding if things get even wonkier before they get betterer. :D
-
*Ahem*
Yo, I don't want to spoil your party, but there is one user on IRC who reports trouble with the password reset function. Apparently it's redirecting him to an attack site, could you make sure that that's fixed first before any cosmetic issues?
(User's name is crizza, btw)
-
That malicious code is what's been triggering this whole mess. I'm trying to figure out where it all is.
-
Which password-reset function, on the forums? I've cleaned out an infected script from the mainpage, but the forums should be fine after Zacan & rev dealt with 'em...
-
Good luck fixing things up guys, I feel for you. Just for reference, conversation is occuring at the moment over under Site Support, apparently in the last couple hours Google has found a couple of active exploits on the site. Not trying to make anyone's day worse, just wanted to make sure that you guys have all the information you need.
-
I figured that's what Google's "This is an attack site" warning was about. Everything is safe right?
-
http://www.hard-light.net/forums/index.php?topic=82703.msg1653486;topicseen#msg1653486
Take a look over in this thread for what seems to be the latest news. Short versions, things should be clean and safe, and the remaining messy bits should be patched up soon.
-
accessed the site without triggering any warnings now
-
With no threats on my radar, I guess we're live and back in business.