Hey, Red Priest here, however, my Red Priest username & password no longer work, so say hello to my sock puppet.

Please let me know if this is a ban or just a bug.  If it's a ban, I'll go quietly, but if it's a bug, then fix it damn it!

I believe I have fixed the problem.

Basically it was an injection attack.  Some of the spam accounts embedded codes to alter the way the member list was displayed and they could show ads.  This broke the login code and the admin interface that lets me clean out accounts.

I don't think any data or accounts were lost.  I just cleaned out all the spam accounts so its possible I deleted some real account if they never posted.  If so, just rejoin.

I haven't fixed the thing that lets them do this so it could happen again.  I assume that someone found this hole in YaBB and the spammers have incorporated it.  I will either have to find a patch to block it or upgrade the forum when I get time.  In the interim, I will keep the spam accounts cleaned up more quickly.

Try logging in and if you have problems make a new account and post the issue.

Quote:


No one told me.  I realize that its difficult to make a post saying the forum isn't working if the forum isn't working but I didn't notice the problem.  I guess because I autologin (login for 'keeps') it just let me in.  None of the old accounts were lost as far as I know, it was just bad data in some accounts (spam accounts) that broke the parsing of accounts and messed up logging in.

There are already more than 40 new spam accounts so I need to do something about the registration process.

there is probably a mod for it... I just haven't spent the time to look.   I might just grab the latest version of the forum and see if its built in.