Annoucements http://forum.phpvms.net Tue, 06 Dec 2016 02:10:28 +0000 720 http://forum.phpvms.net/topic/24255-forum-compromised/


This post was made shortly after the forum "went down".



I wish the best for these guys but it is embarrassing to all of us when developers act this way.

NOTE: Neither my host or I have been able to verify if any data was actually downloaded or not. I would suggest a password change both for the forum and the email you have associated with your profile.

Edit on 12-6-2016 @ 6:15pm EST - The view expressed here is not to be construed as the view of any one or anything else but myself. This is an opinion and also simply provides what I believe to be the facts presented to me, everyone can come to their own conclusion and do their own research if they so desire.]]> Tue, 06 Dec 2016 02:10:28 +0000 http://forum.phpvms.net/topic/24255-forum-compromised/ http://forum.phpvms.net/topic/22632-deleted-profiles/
No one that ever posted on the site was deleted and if you had logged in since January 1st, 2015 your profile was not deleted. I am sorry if you did not meet these conditions and now noticed your profile gone, but never posting and not logging in for 18 months tells me that you were not using it. You are welcome to sign up again for a new profile if you would like.]]> Thu, 16 Jul 2015 19:18:17 +0000 http://forum.phpvms.net/topic/22632-deleted-profiles/ http://forum.phpvms.net/topic/22599-database-corruption/
With so many sites experiencing issues with database corruption I had no choice today but to rebuild the MySql server and restore all databases from the June 28th backup. This includes the forum and VACentral. Any data that was recorded between June 28th and today (July 6th) was lost in the process.

David]]> Mon, 06 Jul 2015 17:40:57 +0000 http://forum.phpvms.net/topic/22599-database-corruption/ http://forum.phpvms.net/topic/21651-updated-phpvms-license/
Nabeel]]> Thu, 25 Sep 2014 02:54:50 +0000 http://forum.phpvms.net/topic/21651-updated-phpvms-license/ http://forum.phpvms.net/topic/16598-21936-security-patch/
I've updated the download to 2.1.936 - basically to null the file where I believe the exploit is coming from. I looked through the other files, and I think they look OK.

Please update as soon as possible - really the only updated file was core/lib/php-ofc-library/ofc_upload_image.php. Instead of deleting it, I patched it, so then it will get patched on an upload.

Sorry for all the trouble guys! Please be sure to look through your server and account very carefully - if you see something suspicious, delete it, or rename it to add a .txt extension so it can't be found, until you can verify if the file is safe or not.

Thanks!]]> Mon, 30 Sep 2013 17:18:36 +0000 http://forum.phpvms.net/topic/16598-21936-security-patch/