Maintenance Items Oct 12, 2015
Posted: Mon Oct 12, 2015 8:05 am
Hey guys...
Friday night, we had a malicious code injection on the site during the show. No huge deal, as the code actually failed in its intended purpose and generated an error log that caused me to get an email notifying me something went haywire. No damage was done, and I've since scanned/sanitized everything and don't see any remnant of the code. We don't store any user information or deal with any finances, so if the whole site was compromised it wouldn't have any ramifications except a hassle for me to get it back online.
That all being said, I couldn't nail down exactly which piece of software had the vulnerability - so, I've taken quite a number of server- and site-hardening steps. One of those was to change the database and table prefixes. This is wise, but very dangerous in that it can break the site. If y'all get the chance, browse around the site (blog; not forum) and see if you find anything that doesn't work or looks broken in some respect. I think I succeeded, but there could be some dark corner of Half Ashed that isn't working properly. Thanks.
Friday night, we had a malicious code injection on the site during the show. No huge deal, as the code actually failed in its intended purpose and generated an error log that caused me to get an email notifying me something went haywire. No damage was done, and I've since scanned/sanitized everything and don't see any remnant of the code. We don't store any user information or deal with any finances, so if the whole site was compromised it wouldn't have any ramifications except a hassle for me to get it back online.
That all being said, I couldn't nail down exactly which piece of software had the vulnerability - so, I've taken quite a number of server- and site-hardening steps. One of those was to change the database and table prefixes. This is wise, but very dangerous in that it can break the site. If y'all get the chance, browse around the site (blog; not forum) and see if you find anything that doesn't work or looks broken in some respect. I think I succeeded, but there could be some dark corner of Half Ashed that isn't working properly. Thanks.
