Hacked Again.

[KevinD]

Ok, some of you were here and saw what was posted earlier, and well it got hacked again because of no security patches.  This had to be paid, and I asked for some help paying it. I did get a small donation.

Im just tired of this and was going to keep my good backup and keep rolling it back, but that would be stupid, anything you took time to post would be lost. And I am tired of cleaning the mess up so I just paid the $199.

 

I Hope that gets us over the hump as the updated software has a patch in it. Im sure Talon will appreciate not having to look at red warning flags everytime she logs on. 

I know no one is made of money as you can see that gives us another year of life.

 

I would appreciate it if folks could chip in $5 or $10 here and there over the next year. Ill keep a running total.

If you don’t have to do it all at once, it isn’t too bad.

So thats it. Next time, ill probably let it go.

[KevinD]

Ok, that’s two I’ll keep a total here. Thank you Penny ! I’ll eat the pay pal fee. If you spend $25 it comes out to $23.79 on this side. $9.22 from Sandra.

$164 left. Please keep in mind that is for this year. I have to pay it again 9/22/2026. I will continue to host it, and pay for the yearly domain registration as my part.

I thank you for sharing the cost. Again, I know someone out there is going he is a cheap a$$. But I promise after doing this for many years running it gets old.

i have two other groups I’m making share for their sites too.

 

I guess I don’t understand. People will pay $9.99 monthly for Hulu and barley watch it. That’s $119.88 a year by itself for 1 person.
There are many other subscriptions that are WAY more expensive.

 

What you have here is decades of combined knowledge. Surely worth more than Hulu every month. But I digress.

[KevinD]

Thank you Karen ! $25 

 

$139 left.

[KevinD]

WOW 2 days, that security patch is holding. Sweet.

[neoow]

Have just sent some money via paypal. Might end up being an odd amount because of currency exchange!
Thanks for all you do to keep the lights on here. I still visit regularly even if I don't have much to talk about.

[KevinD]

It was a quiet weekend. I thank you neoow. It’s been nice to have some support. With our license being up to date now, looks like the Invision Power Board version 5 software is now available to us at no extra cost.

The site has been through some interesting software changes over the years, yet somehow the database has always remained in decent shape.

With the many changes and conversions, the database has areas that are in two different formats as far as the tables are concerned. 
 

To take advantage of all the new options version 5 has to offer, the tables will have to be brought into alignment throughout the entire board, going back to day 1.

Depending on the continued interest, I may go ahead and do that. It is a time intensive process. Anyway thanks to everyone that has pitched in to help. It is VERY appreciated and not gone unnoticed.

 

 

[KevinD]

Ok, got tagged again. Someone is using SQL injection to change the index.php. So I have taken some extra precautions to protect it. It could also be the chatbox plugin, so I changed the version.

If I catch it soon enough, we wont loose as much.

I am not in here everyday, that's just the way it is. If someone that is in here everyday please email me when it goes south, I can get on it immediately. Im also going to look into a service that will alert me when it happens.

I have one other IPB site running with no issues. if someone could email me at support@blackopshosting.com when you see an issue  I would appreciate it. Thanks and sorry for the issues.

[Greytness]

Thank you, Kevin. So sorry to see that you're having to deal with this again. Please know that I am grateful to you for your efforts in keeping this site afloat. 

 

[Talon]

Thanks Kevin, I noticed it last week, but didnt have a way to email you. I have been checking in daily, so Thank you for getting us up & running again. My apologies for all the problems.  

[Timbersmom]

I also check daily and will let you know now that I have the email. Thanks for all you do!

[KevinD]

Thank you ! I have been checking pretty regularly last two days, but I’m sure I might miss here and there. It’s been top of mind because I really want to get this person. But it’s more likely a bot.

Probably hit at some point before the first time,  and we’re on a list.

Even though the site looks blank when it strikes, what happens is it turns the site into a relay agent to infect other sites.

in the background it relays other bots to other servers.

Think of it like a zombie LOL, it turns into a dead site that infects other sites.

 

Anyway, I hope with the changes made to the admin directory, that will put a stop to it. In the meantime I have you guys to be eyes and ears for me. That email addy comes straight to the phone and I get an email alert immediately.

 

Thanks again.

[KevinD]

Ok, they hit again last night. SO, assuming this is a bot, and were on a list, I am going to move the site to https://greyforums.org/ipb/    I am going to put in an auto forwarder so anyone arriving here will automatically be forwarded to the new link address. If your browser holds the cookie it may not auto forward till the cookie clears.

Were getting closer. I now know it happens between 0130 hours and 0200. I also know that the database is not being attacked, because as you can see we have not lost any data. I also can restore the site in a few seconds by replacing the index.php file and removing the underlying word press infrustructure it uses. Moving the admin directory did not help so again assuming it's a bot/list setup, moving the site link might do the trick. If that doesnt work what is left is one of the plugins has some malicious code in it or it is a user here flying under the radar.

We continue on LOL !!!

Thanks for your patience.

 

[Greytness]

Fantastic! Thank you again, Kevin!

[LNCAG]

The site is back!  Yay!  I saved that email address KevinD for in the future, just in case.  Hoping it's resolved.  For me, the site was out since at least Oct 17th, yet I see new posts here from days when I was only able to see this:

 

 

[KevinD]

You probably had a cookie or bookmark. In an attempt to foil this bot, I moved the site and put in an auto forward to https://greyforums.org/ip31          If you had a cookie in the browser, it wouldn’t pick up the auto forward. 

I have high hopes that this is resolved. I thank everyone for their patience. It’s been quite the time.