posted in NewsWritten by Kane March 09, 2012, 09:15:36 AM2319 ViewsPrint
After some prodding from the board, I dug out an old paper copy of an entry level adventure that I had written for release shortly after Forge of Shadow was supposed to be published. After much editing and retyping (the electronic copy was long lost), I've posted it in the downloads section for your use. Unfortunately Shadowfane's graphics were not restorable and there are no images except for the map of Steel Hill. Enjoy.
I am using a spam prevention mod that also allows me to check users already registered, this means I am going through all registered user accounts in search of registered spammers to clean it all up, the criteria is simple: check a database, if the username, ip, mail or display name are in it, it marks them as possible spammers.
If only the username or IP coincides I might not delete it, but if two or more do then I am removing the account entirely. What does that mean?
If your account was removed or you are a lurker and don't want that to ever happen to you, then i advise you to post at least once in the forum, since users with posts are checked for them before being removed.
As of now, I removed more than 100 users from the site.
Seems the latest version of the software still suffers from teh very same vulnerability the other version had, as a result the very same hacker visited us yesterday and left a message: "in one week if the vulnerability stands I will remove all files".
He only changed the index files to show he could do it, which is kinda nice considering everything, but just to be safe i deleted the entire folders structure and flashed back a clean backup copy I had from before reinstalling tinyportal (the articles / downloads / frontpage software).
I have installed and started configuring an alternative to what we had, but since I am not happy with the configuration yet I have not enabled it for everyone to see, meanwhile we are back to safe and stable forums.
Bear with me as I announce the return of the downloads and site sections of the site!
After a long time pondering the pros and cons and making test environments for the new scenario, I have finally deployed the final solution to the live site, the software we are using now is a newer version of the same one we were using before, hopefully this version is free of the security flaw that lead us to two hacks.
Since the software version has a lot of different configuration options, let me know if anything is behaving oddly for you guys.