Site Hacked.. mostly restored

Troubleshooting
Post Reply
srkris
Site Admin
Posts: 3479
Joined: 02 Feb 2010, 03:34
x 37
x 4

#1 Site Hacked.. mostly restored

Post by srkris »

Hi All,

The site was hacked, but has been mostly restored.

Need to work on some minor issues but do let me know in this thread if you find something is not working.

vgovindan
Posts: 1859
Joined: 07 Nov 2010, 20:01
x 92
x 14

#2 Re: Site Hacked.. mostly restored

Post by vgovindan »

Srkrs,
Thanks for this announcement. We were worried about the site. In this page, the Quick links comes up without being invoked. Similarly, 'Jump to comes up without being invoked.
The front page is having all symbols.
Thanks for your efforts to restore normalcy.
Wish you all the best.
V Govindan

Nick H
Posts: 9153
Joined: 03 Feb 2010, 02:03
x 943
x 27

#3 Re: Site Hacked.. mostly restored

Post by Nick H »

Thank you for your work. It has been sad seeing the error messages over the past couple of days.

Was it a random attack, or something more personal/targeted? I just can't understand why anybody would be interested in attacking us!

srkris
Site Admin
Posts: 3479
Joined: 02 Feb 2010, 03:34
x 37
x 4

#4 Re: Site Hacked.. mostly restored

Post by srkris »

Thanks both for your concern. It seemed like an automated hack using backdoor trojans (perhaps using some pre-existing vulnerability in the script). I have now updated the forum scripts to the latest version and have also tightened up file permissions on the server. Hopefully that won't be repeated. Anyways I've scheduled frequent backups so not much can get lost permanently.

If you find something still seems strange, try CTRL+F5 to refresh your browser cache, still if things dont improve please let me know either here or by email.

Nick H
Posts: 9153
Joined: 03 Feb 2010, 02:03
x 943
x 27

#5 Re: Site Hacked.. mostly restored

Post by Nick H »

Thank you

rshankar
Posts: 13697
Joined: 02 Feb 2010, 22:26
x 813
x 18

#6 Re: Site Hacked.. mostly restored

Post by rshankar »

Thank you srkris for your prompt restoration!

Pratyaksham Bala
Posts: 3808
Joined: 21 May 2010, 16:57
x 261
x 16

#7 Re: Site Hacked.. mostly restored

Post by Pratyaksham Bala »

srkris:
THANKS !

thanjavooran
Posts: 2714
Joined: 03 Feb 2010, 04:44
x 248
x 13

#8 Re: Site Hacked.. mostly restored

Post by thanjavooran »

ThanQ srkris !

Nick H
Posts: 9153
Joined: 03 Feb 2010, 02:03
x 943
x 27

#9 Re: Site Hacked.. mostly restored

Post by Nick H »

whenever we have a crash, we loose the "thanks." If I remember rightly from the last time, this is an add-on feature, which takes some time to add on, and waiting patiently is the order of the day.

So... waiting patiently! :)

srkris
Site Admin
Posts: 3479
Joined: 02 Feb 2010, 03:34
x 37
x 4

#10 Re: Site Hacked.. mostly restored

Post by srkris »

Yes, I have disabled the thanks feature since it is not compatible with the current version. I will look to restore it as soon as it is upgraded to be compatible with the latest version.

Nick H
Posts: 9153
Joined: 03 Feb 2010, 02:03
x 943
x 27

#11 Re: Site Hacked.. mostly restored

Post by Nick H »

"Thanks"

:D

rshankar
Posts: 13697
Joined: 02 Feb 2010, 22:26
x 813
x 18

#12 Re: Site Hacked.. mostly restored

Post by rshankar »

Why is the forum page filled with red circles???

eesha
Posts: 359
Joined: 30 Apr 2009, 23:15
x 5
x 2

#13 Re: Site Hacked.. mostly restored

Post by eesha »

srkris wrote: 02 Feb 2017, 02:07 I have now updated the forum scripts to the latest version and have also tightened up file permissions on the server. Hopefully that won't be repeated.
Please disable FTP in your server, if not done already. FTP protocol is prone to vulnerability , which I learnt when sangeethapriya was hacked. Disabling FTP prevented further attacks. Also if you do ssh, pls disable root login.

VK RAMAN
Posts: 5002
Joined: 03 Feb 2010, 00:29
x 1

#14 Re: Site Hacked.. mostly restored

Post by VK RAMAN »

Thanks.

srkris
Site Admin
Posts: 3479
Joined: 02 Feb 2010, 03:34
x 37
x 4

#15 Re: Site Hacked.. mostly restored

Post by srkris »

rshankar wrote: 02 Feb 2017, 21:18 Why is the forum page filled with red circles???
Please refresh your page using CTRL+F5. Apologies for the inconvenience

aaaaabbbbb
Posts: 1994
Joined: 31 Jan 2010, 14:19
x 5

#16 Re: Site Hacked.. mostly restored

Post by aaaaabbbbb »

Respected Sir,

Thank you very much for resolving my log-in problem.

Much appreciate your prompt action.

Thank you once again,

Regards

Nick H
Posts: 9153
Joined: 03 Feb 2010, 02:03
x 943
x 27

#17 Re: Site Hacked.. mostly restored

Post by Nick H »

It looks like it has been a long, hard slog for skris. Probably several days work on top of his career demands. Hoping for no more hiccoughs now!

Thanks again... Appreciation is due in heaps :)

srkris
Site Admin
Posts: 3479
Joined: 02 Feb 2010, 03:34
x 37
x 4

#18 Re: Site Hacked.. mostly restored

Post by srkris »

Apologies again for the inconvenience... although I didn't hack the site myself :D

Anyone who still can't login or see errors, please contact me.

thanjavooran
Posts: 2714
Joined: 03 Feb 2010, 04:44
x 248
x 13

#19 Re: Site Hacked.. mostly restored

Post by thanjavooran »

Many thanks for your tireless sincere efforts.
Thanjavooran
05 02 2017

Nick H
Posts: 9153
Joined: 03 Feb 2010, 02:03
x 943
x 27

#20 Re: Site Hacked.. mostly restored

Post by Nick H »

srkris wrote: 05 Feb 2017, 18:22Apologies again for the inconvenience... although I didn't hack the site myself :D.
:D :lol: :D :lol: :D

vgovindan
Posts: 1859
Joined: 07 Nov 2010, 20:01
x 92
x 14

#21 Re: Site Hacked.. mostly restored

Post by vgovindan »

srkris,
I have the same problem (of symbols) with the Menu and sub-menu pages. However, the actual content of the topics are ok. I have cleared the History.
I am able to view properly in the cellphone.
Can you please help?

vgovindan
Posts: 1859
Joined: 07 Nov 2010, 20:01
x 92
x 14

#22 Re: Site Hacked.. mostly restored

Post by vgovindan »

srkris,
Now - 5.30 pm 7 Feb 17, things seem normal.
I am able to view the site without any problem.
Thanks for setting it right.
God Bless u
V Govindan

srkris
Site Admin
Posts: 3479
Joined: 02 Feb 2010, 03:34
x 37
x 4

#23 Re: Site Hacked.. mostly restored

Post by srkris »

vgovindan wrote: 07 Feb 2017, 17:33 srkris,
Now - 5.30 pm 7 Feb 17, things seem normal.
I am able to view the site without any problem.
It is a cache issue - it will fix itself, however, as the announcement at the top shows, CTRL+F5 will have done the trick.

vgovindan
Posts: 1859
Joined: 07 Nov 2010, 20:01
x 92
x 14

#24 Re: Site Hacked.. mostly restored

Post by vgovindan »

SRkris, There seem to be one problem - For every session, I am asked to login in spite of my enabling 'remember' button.

srkris
Site Admin
Posts: 3479
Joined: 02 Feb 2010, 03:34
x 37
x 4

#25 Re: Site Hacked.. mostly restored

Post by srkris »

vgovindan wrote: 10 Feb 2017, 22:21 SRkris, There seem to be one problem - For every session, I am asked to login in spite of my enabling 'remember' button.
Thanks for reporting, I will check why this is happening.

Nick H
Posts: 9153
Joined: 03 Feb 2010, 02:03
x 943
x 27

#26 Re: Site Hacked.. mostly restored

Post by Nick H »

It does not happen for me. Auto login and going straight to New-Posts page is now as smooth as pre-hack days.

rshankar
Posts: 13697
Joined: 02 Feb 2010, 22:26
x 813
x 18

#27 Re: Site Hacked.. mostly restored

Post by rshankar »

Knock on wood, for me as well.
Now that I've figured out how to clear the cache on my phone, I'm set.... copacetic even!

Nick H
Posts: 9153
Joined: 03 Feb 2010, 02:03
x 943
x 27

#28 Re: Site Hacked.. mostly restored

Post by Nick H »

rshankar wrote: 11 Feb 2017, 21:18 copacetic even!
:ugeek: :ugeek: :ugeek:

srkris
Site Admin
Posts: 3479
Joined: 02 Feb 2010, 03:34
x 37
x 4

#29 Re: Site Hacked.. mostly restored

Post by srkris »

vgovindan wrote: 10 Feb 2017, 22:21 SRkris, There seem to be one problem - For every session, I am asked to login in spite of my enabling 'remember' button.
Please try deleting your website cookies by clicking here and try to login again with remember option enabled

Nick H
Posts: 9153
Joined: 03 Feb 2010, 02:03
x 943
x 27

#30 Re: Site Hacked.. mostly restored

Post by Nick H »

The unread posts link is failing -- http://www.rasikas.org/forums/search.ph ... nreadposts

An error occurred during a connection to www.rasikas.org.

Peer reports it experienced an internal error.

Error code: <a id="errorCode" title="SSL_ERROR_INTERNAL_ERROR_ALERT">SSL_ERROR_INTERNAL_ERROR_ALERT</a>

srkris
Site Admin
Posts: 3479
Joined: 02 Feb 2010, 03:34
x 37
x 4

#31 Re: Site Hacked.. mostly restored

Post by srkris »

Yes it was an issue with Cloudflare, it must be working now?

Nick H
Posts: 9153
Joined: 03 Feb 2010, 02:03
x 943
x 27

#32 Re: Site Hacked.. mostly restored

Post by Nick H »

No: same error.

Nick H
Posts: 9153
Joined: 03 Feb 2010, 02:03
x 943
x 27

#33 Re: Site Hacked.. mostly restored

Post by Nick H »

error gone. Working now :)

Post Reply