Scratch
archived forums
#126 2012-10-08 16:11:07
#127 2012-10-08 16:34:09
#128 2012-10-08 16:41:35
Re: EternityX1 Development Topic
P110 wrote:
Ok, well I missed a lot here, catch me up?
well, I finished the users files, and messages files, jvvg added an AJAX search to the users index, and now I'm working on cleaning up includes files / implementing admin files.
Eternity Tasks has launched into Alpha One!
Offline
#129 2012-10-08 17:16:12
#130 2012-10-08 17:50:23
#131 2012-10-08 18:50:09
#132 2012-10-08 18:51:45
#133 2012-10-08 19:32:42
#134 2012-10-09 10:08:38
#135 2012-10-09 10:09:51
- veggieman001
- Scratcher
- Registered: 2010-02-20
- Posts: 1000+
Re: EternityX1 Development Topic
XenoK wrote:
who keeps getting past the 403s and keep banning me? I should have them know I can't be banned from my own site anymore.
well obviously you can, or else it wouldn't be possible
Posts: 20000 - Show all posts
Offline
#136 2012-10-09 10:51:19
#137 2012-10-09 12:08:09
#138 2012-10-09 13:53:34
#139 2012-10-09 21:59:57
Re: EternityX1 Development Topic
I started reading a book explaining debugging techniques, and hacking techniques, and how to prevent them, 5 pages in, I realize how many vulnerabilities the site has right now, but I can fix them all by this weekend.
Eternity Tasks has launched into Alpha One!
Offline
#140 2012-10-10 04:49:53
#141 2012-10-10 05:06:13
Re: EternityX1 Development Topic
We have a serous problem, we must have been hacked, change all passwords XenoK
I found this in header.php:
<?php // HEADER
/*******************************************************************************
* DO NOT REMOVE THIS COMMENT, IT CONTAINS IMPORTANT INFORMATION ABOUT THE FILE,
* AND CAN VOID THE TERMS OF THE ESCLv1 LICENSE
*
*---------------------------------------------------------------------
*
* (C) Copyright 2012 Eternity Incurakai, All Rights Reserved.
* EternityX1 Project -- ALPHA release Stage
* Licensed under the ESCLv1 http://eternityinc-official.com/license
*
*----------------------------------------------------------------------
*
* Code by: XenoK Xihelien & P110
* support@eternityinc-official.com
*
*******************************************************************************/
// declare variables
$user = $_SESSION['username'];
header('Location:http://dot.tk/');
exit();
?>
Somebody has gained access, I took this out, but there must be one somewhere else
EDIT: I'm in school so will have to check this out later, but until then, I recommend XenoK, that you change everything including your domain password, it could all be hacked! 
Last edited by P110 (2012-10-10 05:11:21)
Me live on 2.0 now
Offline
#142 2012-10-10 05:18:58
Re: EternityX1 Development Topic
You should issue a statement on your blog:
Hacked
The Eternity Incurakai team, are very annoyed
that the site has been hacked, and redirected to dot.tk
We will be upgrading every aspect of our site, including security
And we believe we know who has been doing this
and, who has been sending hurtful comments to the eternity team.
If you are reading this, please note, we have discussed this, we know it's you
and we are working to deny you access to the entire system.
And also, could someone else help me track down the lines of code, which are causing the redirect? It has to be in a file included on every page, I'm going to go through all of the includes after school.
Last edited by P110 (2012-10-10 05:19:52)
Me live on 2.0 now
Offline
#143 2012-10-10 05:21:25
Re: EternityX1 Development Topic
XenoK wrote:
I started reading a book explaining debugging techniques, and hacking techniques, and how to prevent them, 5 pages in, I realize how many vulnerabilities the site has right now, but I can fix them all by this weekend.
I know I need to learn these I'm reading hacking for dummies
Me live on 2.0 now
Offline
#144 2012-10-10 14:01:02
#145 2012-10-10 14:11:10
Re: EternityX1 Development Topic
XenoK wrote:
This isn't funny at all. Jvvg, I just removed your FTP access. I'll be resetting all other passwords pretty soon as well.
Ok, cool.
I seriously didn't do it.
Also, you wanted me to come here because there's a serious problem. What do you want me to do to help?
Goodbye, Scratch 1.4
Hello Scratch 2.0! 
Offline
#146 2012-10-10 14:12:22
Re: EternityX1 Development Topic
jvvg wrote:
XenoK wrote:
This isn't funny at all. Jvvg, I just removed your FTP access. I'll be resetting all other passwords pretty soon as well.
Ok, cool.
I seriously didn't do it.
Also, you wanted me to come here because there's a serious problem. What do you want me to do to help?
we need to stop this guy once and for all. They've been injecting the site like crazy, somehow gotten past all my 403s, and now has gotten FTP access. I need some help as to how to fix this.
Eternity Tasks has launched into Alpha One!
Offline
#147 2012-10-10 14:13:21
Re: EternityX1 Development Topic
XenoK wrote:
jvvg wrote:
XenoK wrote:
This isn't funny at all. Jvvg, I just removed your FTP access. I'll be resetting all other passwords pretty soon as well.
Ok, cool.
I seriously didn't do it.
Also, you wanted me to come here because there's a serious problem. What do you want me to do to help?we need to stop this guy once and for all. They've been injecting the site like crazy, somehow gotten past all my 403s, and now has gotten FTP access. I need some help as to how to fix this.
Well, check all the security code (which I hear could use some improvements), and change all of the FTP passwords.
Edit: don't forget database passwords too.
Last edited by jvvg (2012-10-10 14:13:34)
Goodbye, Scratch 1.4
Hello Scratch 2.0! Offline
#148 2012-10-10 14:13:58
Re: EternityX1 Development Topic
jvvg wrote:
XenoK wrote:
jvvg wrote:
Ok, cool.
I seriously didn't do it.
Also, you wanted me to come here because there's a serious problem. What do you want me to do to help?we need to stop this guy once and for all. They've been injecting the site like crazy, somehow gotten past all my 403s, and now has gotten FTP access. I need some help as to how to fix this.
Well, check all the security code (which I hear could use some improvements), and change all of the FTP passwords.
Edit: don't forget database passwords too.
gotcha
Eternity Tasks has launched into Alpha One!
Offline