See Barney? That's how I feel right now.

Apr 11, 2008 19:14

Well, I now know what I'm doing instead of having that relaxing weekend I've been dreaming about: Restoring my web site, which got HACKED. (Fuck!)

Just as a public service, since I've spent all day dealing with this shit, here's some tips:

Coppermine seems to be the culprit, even though I know some other applications were targeted. I'm just not running any of those, so in my case, it's pretty clear.

To protect yourself, you can do the following:

  • Use a script-blocker like NoScript!
  • Update to the latest version of Coppermine (doesn't help this issue, but you're not going to get support in the forum unless you do). Yay, new release!
  • There is apparently a vulnerability in the upload feature. Log in as Admin, go to Groups and under "Upload Method", set the "URI upload boxes" to 0 for all groups.
  • The hack is apparently targeted at two php files - update.php and pluginmgr.php. You can delete these via ftp without it affecting the performance of the gallery, so do. I've done just that after I've restored a gallery (and after backing up the files).

If you've already been hacked, read this forum thread. If you still have questions, I might be able to answer them.

winter_baby and bellanut, I've checked your galleries and so far I haven't seen any signs of them being hacked (hacked galleries have a row of black characters at the top and bottom. Also, my script blocker pops up), but you might want to take the preventative measures I listed under the cut. Also, winter_baby, the original FNL gallery has been compromised, so I'm just going to delete it entirely (I only say this because I noticed you hadn't uploaded the caps for episode 2 yet, so you might want to do that).

Right now, the galleries that are affected are offline or the directories renamed (another side-effect seems to be that I can't log into some of them to take them offline). So far, I've only restored some of the smaller galleries, like Eureka, The Black Donnellys and [spooks] (ETA: Also: Bones, .avi, movies, Dexter, Rome, TV, British Comedies, US Comedies, Buffy, Doctor Who, The West Wing) but I hope to get vm-caps and the movie gallery up and running tonight. DONE!

Wow, this sure is FUN. /sarcasm

psa, site: leavemethewhite, fuuuuuuck, site: vm-caps

Previous post Next post
Up