Forum Outage, Part Deux
Moderator: Moderators
- Turaiel
- Administrator
- Posts: 348
- Joined: Wed Nov 10, 2010 3:32 am
- Location: Ann Arbor, MI, USA
- Fav. Twokinds Character: Natani
- Contact:
Forum Outage, Part Deux
I'm really tired after fixing this one, so I'm going to make this short and sweet. The forum became infected again (a different exploit this time) which caused a spike in CPU usage and basically dragged the server to a halt. In addition to that, attached storage on our server was having issues, causing lots of I/O problems and performance reduction.
Digital Ocean fixed the storage, and I removed the problem files. At the same time, I upgraded the forum to the newest available version of phpBB. Normally we wouldn't do this until a few bugfixes were released, but the previous version may have contained exploits that led to the infection, and I didn't want to take that chance. You'll probably notice that the themes have changed. This is due to compatibility issues with the new version of phpBB.
Additionally, I've disabled the video embed bbcode for the moment. I don't think it could have caused the exploit but I'm being extra careful with it because the malware began appearing the day after I activated that.
The exploit did have the capability of accessing our database password, so I've changed it and logged out all users. Please change your password on here and any websites that use the same password.
Sorry for the inconvenience.
Update: I'm currently working on making the theme more in line with what we had before so you may see some odd styles for the time being.
Update 2: I know change is hard, guys. I can't help that the phpBB developers have dropped support for subsilver and subsilver-based themes, and this is as close as we can get to the old theme at this time. I can make small tweaks here and there but I have limited time available to do so.
Digital Ocean fixed the storage, and I removed the problem files. At the same time, I upgraded the forum to the newest available version of phpBB. Normally we wouldn't do this until a few bugfixes were released, but the previous version may have contained exploits that led to the infection, and I didn't want to take that chance. You'll probably notice that the themes have changed. This is due to compatibility issues with the new version of phpBB.
Additionally, I've disabled the video embed bbcode for the moment. I don't think it could have caused the exploit but I'm being extra careful with it because the malware began appearing the day after I activated that.
The exploit did have the capability of accessing our database password, so I've changed it and logged out all users. Please change your password on here and any websites that use the same password.
Sorry for the inconvenience.
Update: I'm currently working on making the theme more in line with what we had before so you may see some odd styles for the time being.
Update 2: I know change is hard, guys. I can't help that the phpBB developers have dropped support for subsilver and subsilver-based themes, and this is as close as we can get to the old theme at this time. I can make small tweaks here and there but I have limited time available to do so.
Website Administrator
- TinyVoices
- Templar Inner Circle
- Posts: 6276
- Joined: Sat Apr 09, 2011 6:08 pm
- Location: https://goo.gl/7ARWF4
- Fav. Twokinds Character: Kat
Re: Forum Outage, Part Deux
Oh no, I have to get used to the forums looking super weird because none of the board styles are anywhere close to each other.
R.I.P. Subsilver Plus. I knew thee well. (If and when we could get it back, that would be appreciated. I know I'm not the only one who uses it. Also if I somehow mess up a post in the next few days, I blame not having my eyes now.)
Also thank you for making the repair super fast this time!
R.I.P. Subsilver Plus. I knew thee well. (If and when we could get it back, that would be appreciated. I know I'm not the only one who uses it. Also if I somehow mess up a post in the next few days, I blame not having my eyes now.)
So, are we being targeted directly or is this just some wide spread bot thing focusing on this type of small webforum?
Also thank you for making the repair super fast this time!
- Vintage
- Certified Fool
- Posts: 1213
- Joined: Mon May 26, 2014 3:32 pm
- Location: Planet Zambodia
- Fav. Twokinds Character: Natani
Re: Forum Outage, Part Deux
Well then. This seems to just get worse and worse. Thanks for dealing with this bombardment of garbage lately.
And yeah, I'd also like to know if we're specifically being targeted, or if this...problem....is just a mass attack, and we're just caught up in it (I imagine it's the latter).
Oh, and is it safe to assume that the original/default subsliver isn't going to work anymore? Because I know it's only an aesthetic change, but I'd definitely prefer to have it back as opposed to this version. If the original doesn't work again, then oh well. I can deal with it.
And yeah, I'd also like to know if we're specifically being targeted, or if this...problem....is just a mass attack, and we're just caught up in it (I imagine it's the latter).
Oh, and is it safe to assume that the original/default subsliver isn't going to work anymore? Because I know it's only an aesthetic change, but I'd definitely prefer to have it back as opposed to this version. If the original doesn't work again, then oh well. I can deal with it.
Re: Forum Outage, Part Deux
Hello, do you have a moment to talk about our lord and savior, Prosilver Special Edition?
But really, thanks Turaiel for fixing it so quick. I hope that whoever keeps doing this gives up on their foolish endeavor of world domination via a furry forum site... Having to change passwords all the time is stressful...
Re: Forum Outage, Part Deux
Sorry about the style change. I'm going to try and find something compatible that's close to the original. Or at least get avatars on the left as an option. Please bear with us.
- Turaiel
- Administrator
- Posts: 348
- Joined: Wed Nov 10, 2010 3:32 am
- Location: Ann Arbor, MI, USA
- Fav. Twokinds Character: Natani
- Contact:
Re: Forum Outage, Part Deux
It is more than likely just bots. PhpBB is notorious for having security holes in general.TinyVoices wrote: ↑Wed Apr 05, 2017 5:09 am So, are we being targeted directly or is this just some wide spread bot thing focusing on this type of small webforum?
Website Administrator
- Turaiel
- Administrator
- Posts: 348
- Joined: Wed Nov 10, 2010 3:32 am
- Location: Ann Arbor, MI, USA
- Fav. Twokinds Character: Natani
- Contact:
- Akira110
- Literary Artist
- Posts: 1115
- Joined: Thu Jan 26, 2012 11:43 pm
- Location: Somewhere around Verbana
- Contact:
Re: Forum Outage, Part Deux
I changed my password, however, I literally have... bigger issues right now.
Been around this forum for over 8 years now. Everyone I've known has left, now it's my time to do the same.
- TinyVoices
- Templar Inner Circle
- Posts: 6276
- Joined: Sat Apr 09, 2011 6:08 pm
- Location: https://goo.gl/7ARWF4
- Fav. Twokinds Character: Kat
Re: Forum Outage, Part Deux
I think I'm just being a drama queen about it. I just freaked out over the big change.
Thank you, Tom.
For which board type? Currently avatars are on the right for me when using prosilver.
Edit: that "Allanstyle subsilver" type makes them on the left, but when the browser window is minimized the post's content starts underneath the avatars. XD
- NiWo21k
- Merchant
- Posts: 160
- Joined: Fri Jun 17, 2016 1:33 pm
- Location: Somewhere but not here
- Fav. Twokinds Character: Raine
- Contact:
Re: Forum Outage, Part Deux
That explains alot - was wondering why everything looked so alien all of a sudden.
But at the moment these attacks on websites are getting worse again (not only here) - looks like these "people" dont have anything important to do then attack some underground forums (please dont get this the wrong way, but for me the TwoKinds Forum isnt a place where everybody is looking and reading, its more for the fans of the comic and Tom)
But at the moment these attacks on websites are getting worse again (not only here) - looks like these "people" dont have anything important to do then attack some underground forums (please dont get this the wrong way, but for me the TwoKinds Forum isnt a place where everybody is looking and reading, its more for the fans of the comic and Tom)
Just an average internet user and & fan
My head is full of ideas, but i cant get them on paper - Please brain start thinking about important stuff.
Avatar: a reinterpretation of my own character by Claarin
My head is full of ideas, but i cant get them on paper - Please brain start thinking about important stuff.
Avatar: a reinterpretation of my own character by Claarin
- FrogSteaks
- Grand Templar
- Posts: 1072
- Joined: Thu Jan 29, 2015 12:17 am
- Location: Richmond, VA
Re: Forum Outage, Part Deux
I don't know how many mobile forum users we have here, but the current subsilver edition is pretty clunky on mobile...
Avatars are quite small, and signature icons are pretty damn big. It looks the same way with both prosilver editions as well.
Also, I kinda miss the ability to see the most recently replied topic in each board on the main menu. Sorry if it seems like I'm griping. I just wanted to let you guys know what I'm seeing. I dont know if y'all can do something about that. If so, great. If not, oh well...
Anyway, sorry you guys had to deal with another attack, especially so soon after the previous one.
Spoiler!
Also, I kinda miss the ability to see the most recently replied topic in each board on the main menu. Sorry if it seems like I'm griping. I just wanted to let you guys know what I'm seeing. I dont know if y'all can do something about that. If so, great. If not, oh well...
Anyway, sorry you guys had to deal with another attack, especially so soon after the previous one.
You miss 100% of the shots you don't take. -Wayne Gretzky
- Turaiel
- Administrator
- Posts: 348
- Joined: Wed Nov 10, 2010 3:32 am
- Location: Ann Arbor, MI, USA
- Fav. Twokinds Character: Natani
- Contact:
Re: Forum Outage, Part Deux
I've tweaked the styles a bit more to address issues that were pointed out, and make the theme a bit closer to what we had before. If you have any other suggestions, please make them.
Website Administrator
- Turaiel
- Administrator
- Posts: 348
- Joined: Wed Nov 10, 2010 3:32 am
- Location: Ann Arbor, MI, USA
- Fav. Twokinds Character: Natani
- Contact:
Re: Forum Outage, Part Deux
¯\_(ツ)_/¯
I don't see any issues.ThunderVolt wrote: ↑Thu Apr 06, 2017 1:14 am Also, none of the images are loading for me for some reason on mobile. Computer, just fine. Glitch?
The issue was that the avatars moved to the right when I first brought the forums back. I tweaked the theme to move them back to the left.ThunderVolt wrote: ↑Thu Apr 06, 2017 1:14 am PS: I don't know what you're talking about, with the avatars always being on the right and new change being on the left. They have always been on the left for me.
Website Administrator
- Turaiel
- Administrator
- Posts: 348
- Joined: Wed Nov 10, 2010 3:32 am
- Location: Ann Arbor, MI, USA
- Fav. Twokinds Character: Natani
- Contact:
Re: Forum Outage, Part Deux
You'll have to get used to it. The old themes are incompatible. Tweaks are possible.ThunderVolt wrote: ↑Thu Apr 06, 2017 1:21 am Quotes do look weird, though. Got any intentions to reversing it back to the way it was or must I get used to this?
Subsilver is the old phpBB theme we used before (with the addition of some modifications). It was the default theme for phpBB for several years. As of phpBB 3.2, it is no longer supported. Prosilver is a newer theme that is now the default for phpBB. It has the advantage of being responsive as well, so the forum properly scales on mobile. You have the option of switching to the plain old Prosilver theme in your user CP. The theme we're using now is a mod on Prosilver that gives it the design of Subsilver, again with some custom additions from me.ThunderVolt wrote: ↑Thu Apr 06, 2017 1:21 am And I'm not too familiar with what subsilver and prosilver is. Whatever.
Website Administrator