Little Fighter Empire - Forums

Hi guys,

well you surely recognized that LFE was down (again), this time for two days. Simple answer: we got hacked and the webspace was used for several stuff which wasn't in the TOS of my hosting company. So the account was locked and I had to sign a security paper blablabla ...

Problem: Neither me or BluePhoenix got time to fix the major problem right now, so we had to make a choice - choice was to put a write protection on the complete website. This won't have any effect on the forums beside the attachements and avatars are locked - you won't be able to host here anymore, just on external hosts.

That's it for now, have fun here ^^

Bye
Razen
Good job, man - Simoneon

It looks as though several posts from after 22 February is deleted, is that a side-effect or something?


EDIT:
An HTTP 500 Internal Server Error is entirely unrelated, right?

(02-27-2013, 08:42 PM)Shane Wrote: [ -> ]It looks as though several posts from after 22 February is deleted, is that a side-effect or something?

Quite a few things were bugged (files, database, etc), so we reverted them to the most recent (while stable & safe) backup.

Edit @ up's edit (): yeah, not related. Ignoring it is best

oh yeah i forgot - i used a backup from 22th february...

ah yah several posts have been deleted and btw it was very iritating that lfe was down for this much time

Nooooooo! My posts! Aw man!!!

403 errors all over.
Dr. Time was complaining to me over that.

well, the posts in forum games have not gone

hope that everything in this forum gets fixed

I have looked at the code that deals with avatar-uploading. Basically, it goes like this:

1. Upload to LFE
   • Let a user specify an image-file to upload it
   • Transfer and store the file on the server (if necessary, replace the old one with the new)
   • Perform a few calculations (especially image size so that it'll be displayed correctly all over the place and auto-resize / throw an error in case the dimensions are larger than acceptable)
   • Update the respective entry in the database
2. Use an external host
   • Follow the link specified
   • Because of security-reasons, PHP cannot get image-data from a non-local place. Hence, download it and run the same calculations as in local mode
   • Update database-entry and delete the downloaded copy from the local server

You probably see the problem: either way requires write-permissions. The verification-process is, according to my understanding, impossible to do remotely. And even if there was a way, that'd require me to edit the PHP-files. Which I can't. WHICH NOBODY CAN! TEH APOCALYPSE!!