[Guild] Community of Vaalnor: SoR

[moopa]

Think you should know some turkish dude has hacked our website! Putting up a large picture (stating we have conpsired against turkey and its goverment) blocking all of our site\'s navigation bars. He says hi will sort it out but thatb what happend is a warning and he\'ll do it again.

THis is not a joke!

edit:

This site is Hack?d By T?uf?L For making action again TURKEY republic or bing with groups which are supporting this type of even. This is our first warning for you if you countine to make same thing we will hack this site more time.You will join us or we will destroy you. T?uf?L wa??hhh Here  

this is whats he has wrote

[Valbrandr]

Yeah our site has been hacked sadly.. I need to get with Lishom and see what we can do about it and how we can attempt to stop it from happening again.  Im kinda at a loss for words.. didnt even think about this happening.

[Ashamn]

Bastard.

This really sucks..

=|

[josephoenix]

That\'s one of those things that happens when you use PHP-Nuke... I had a php nuke site once, but after a few months it had been hacked by some silly brazilian vandals so I switched to something else... php nuke has lots of sql injection vulnerabilities, so either you need a \"security module\" of some kind that watches and deters attempts to exploit them, or you should switch to a different content management system. If you have alot of stuff on your current site in the phpnuke database that you don\'t want to/can\'t copy over to another system, you should try to find a security module thing. Overall, it would be better to find a different content management system.

Some of the more popular ones include:
xoops
tikiwiki (used by the main crystalspace site and crystalcommunity site)
mambo/joomla (used by the feline\'s lair along with an extension that adds phpBB)

PS-MC uses a phpbb forum in conjunction with WordPress... We havent\' been hacked, but on the other hand nobody much seems to know or care about our existance

josePhoenix

[Valbrandr]

We have another site in progress.. it was nearly finished using Mambo.  But Ill have to get in touch with Lishom and see where he wants to go with everything.  What gets me is that we are just a PS Guild.. why would someone even bother with our site... it obviously makes me think its someone who would know us though I didnt know we had made any enemies of that magnitude.  But we will get things back in order soon enough

[Pestilence]

The Dark Empire has finally started their attack on Ojaveda

Ugh hackers are very annoying indeed. Don\'t see really what the fun is in it. I mean I can imagine it being fun knowing you can do something like that but to ruin someones fun and work..... I just can\'t see it.

Hope you will get the old or the new site back up soon Val.

PS: congrats on making GM. Don\'t believe I posted that yet

[moopa]

The site has been \"unhacked\", the large picture opbscuring everything has gone.

[Pestilence]

Good to hear

[Sangwa]

Pesty dude, that\'s not a good joke.
There\'s not much to laugh at when we\'re talking about people ruinning other people\'s work.

[Valbrandr]

Well atleast it was fixed for now.. but ya time to get that Mambo site up and running before something else stupid happens.

[josephoenix]

*injects the obligatory comment*
Backups!

Valbrandr: These stupid hacking groups use scripts, as far as I can tell. It\'s easy as can be to find PHP Nuke installs, and there\'s a fair chance they will be unpatched or not properly secured. Just look here... Google Search Results (er.. that link doesn\'t want to work but just do a search for \"Web site engine code is Copyright ? 2003 by PHP-Nuke. All Rights Reserved. PHP-Nuke is Free Software released under the GNU/GPL license.\", that\'s in the footer of every php nuke site out there ) Out of 3,680,000 results they can attack willy-nilly I doubt they even cared what your site was about, I had a site that I used to post homework assignments and keep up with friends, and they hacked that ( that time it was brazilians >.> )

josePhoenix

[Induane]

If I remember correctly our sites host, plexus, is banned from google.  I never could get it to show up anywhere on it.  I think it has something to do with other parts of the server hosting copyrighted material Not sure though.  

Anyways yea - mambo seems to be the way to go, plus we have a nice mambo add on that will let us import all of our old stuff - forums, etc - to it.

[miLosh]

yeah that hack sucked! it was not very sophisticated but it cost me about 3 hours to get everything back - thanks to nuke... via SQL injection as described by josephoenix, they modified the admin account and set up a big admin message (inside div tags for those who know it) containing said text. i had to set everything back in the database directly, now the site is back to normal. i also could plug the whole they went in, so at least this method wont work any more.

so yes, we where working on the new site on MAMBO, not only for security reasons but also because it is much more comfortable to work with. we also made a first draw of the site, which we never finished \'cause we decided to start all over and try a different layout. well, and than i discovered Guild Wars, some of you may know it - and since then im spending almost all my freetime in Tyria (the time i usually dedicated to CoV ).

it is still catching and i cannot say when i will cool down and start doing other things with my life. when that time comes, i will continue work on CoV\'s new website - though i have no idea when this might be

[Valbrandr]

I can understand Lishom.  There are many people who just cant play Planeshift or who just like variety.  Im sure we will talk soon enough about the new site.. Ind had some ideas.

[Induane]

Among other things yes....

Anyways this is a quick notification taht the vaalnor server is again running for ftp access, so all those working on our project can once again login.  The address is no longer ftp:/vaalnor.shacknet.nu though it is now vaalnor.mine.nu  - everyones login should be the same user and password.  Guest is disabled so no one can view without permission.