Downtime II

[MH-Razen]

Hi guys,

well you surely recognized that LFE was down (again), this time for two days. Simple answer: we got hacked and the webspace was used for several stuff which wasn't in the TOS of my hosting company. So the account was locked and I had to sign a security paper blablabla ...

Problem: Neither me or BluePhoenix got time to fix the major problem right now, so we had to make a choice - choice was to put a write protection on the complete website. This won't have any effect on the forums beside the attachements and avatars are locked - you won't be able to host here anymore, just on external hosts.

That's it for now, have fun here ^^

Bye
Razen
Good job, man - Simoneon

[Shane]

It looks as though several posts from after 22 February is deleted, is that a side-effect or something?


EDIT:
An HTTP 500 Internal Server Error is entirely unrelated, right?

[Silverthorn]

It looks as though several posts from after 22 February is deleted, is that a side-effect or something?

Quite a few things were bugged (files, database, etc), so we reverted them to the most recent (while stable & safe) backup.

Edit @ up's edit (): yeah, not related. Ignoring it is best

[MH-Razen]

oh yeah i forgot - i used a backup from 22th february...

[Emaan Ashraf]

ah yah several posts have been deleted and btw it was very iritating that lfe was down for this much time

[Hero destroyer]

Nooooooo! My posts! Aw man!!!

[Electric2Shock]

403 errors all over.
Dr. Time was complaining to me over that.

[qwertz143]

well, the posts in forum games have not gone

[Bupkis]

hope that everything in this forum gets fixed

[Silverthorn]

I have looked at the code that deals with avatar-uploading. Basically, it goes like this:

1. Upload to LFE
   • Let a user specify an image-file to upload it
   • Transfer and store the file on the server (if necessary, replace the old one with the new)
   • Perform a few calculations (especially image size so that it'll be displayed correctly all over the place and auto-resize / throw an error in case the dimensions are larger than acceptable)
   • Update the respective entry in the database
2. Use an external host
   • Follow the link specified
   • Because of security-reasons, PHP cannot get image-data from a non-local place. Hence, download it and run the same calculations as in local mode
   • Update database-entry and delete the downloaded copy from the local server

You probably see the problem: either way requires write-permissions. The verification-process is, according to my understanding, impossible to do remotely. And even if there was a way, that'd require me to edit the PHP-files. Which I can't. WHICH NOBODY CAN! TEH APOCALYPSE!!