Errors this morning

Nitro & Tracker Owners

Help Support Nitro & Tracker Owners:

Rich Stern

Well-Known Member
Joined
Feb 26, 2000
Messages
2,618
Reaction score
1
Hi all. We had a SQL injection attack sometime this morning. It's a sophisticated hacking attack that injects javascript code into the web site database, trying to redirect the site's visitors to some lame site.



We suffered a rash of these several months ago, and I wrote a comprehensive filter to stop these attacks. The filter has since prevented thounands of such hacking attempts, but whoever did this one found a hole and managed to get through. I'll have to investigate why and fix it.



In removing the malicious code from the database, I accidently wiped out the member profile "About Me" field. When I finish cleaning up from the attack, I will attempt to restore those.



Sorry for the inconvenience.



Rich
 

Marty Klein

Well-Known Member
Joined
Apr 12, 2006
Messages
1,714
Reaction score
1
I hope that it didn't try to hack into my computer, as our system uses return ISPs as targeting information to a return cruise missile.
 

Texas Transplant

Well-Known Member
Joined
Feb 24, 2001
Messages
6,754
Reaction score
0
Location
Fort Worth, TX
No problem. I did get hit with an alert from my local (on my laptop) virus software this morning, after I attempted to get to Nitro. However, it got sent to the quarantee area - and no further problems. Don't know if it was related or not, but thought I'd let you know.



Tex
 

Larry Harp

Well-Known Member
Joined
Jul 12, 2002
Messages
5,678
Reaction score
0
You know I didn't think about it until just now but I had a shutdown and I had to hard boot to get back up.:unsure:
 

Tim Koepp

Well-Known Member
Joined
Jul 31, 2008
Messages
523
Reaction score
0
to quote a line from the movie "Johnny Dangerously": fargin' ice holes
 

William H. (Bill) Barham

Well-Known Member
Joined
Aug 27, 2003
Messages
6,444
Reaction score
0
Heck, when I looked at the "about me" part in my member profile I just thought you'd already brought mine up to date on your own?:lol:



Uncle Billy
 

Berry Lindley

Well-Known Member
Joined
Mar 17, 2007
Messages
1,076
Reaction score
0
Yep this was identified as a trojan. My McAfee AV software did catch this and removed it. I have been away for a few days to let this get cleaned up. Bass turds like that out to be locked up.
 

Latest posts

Top