- Welcome to Xepher.Net Forums.
Recent posts
#61
Announcements / Re: Update Your WordPress Inst...
Last post by Turnsky - January 03, 2018, 11:15:57 PMCan attest this works, just happened to check the forum saw the message, went to check the site to update the WP install... lo and behold. :B
#62
Announcements / Update Your WordPress Installs...
Last post by Xepher - January 03, 2018, 10:30:49 AM:UPDATE:
Well, it's more than a year later, and a lot of accounts have fallen out of date again. I've disabled these. If your site has a notice that your Wordpress was out of date, email me and I'll unlock it, so that you can upgrade.
Note that the current version of Wordpress is now 5.6.2.
:UPDATE:
Just as everyone seems to have finally been updated, Wordpress goes and breaks their auto-update process.
https://wordpress.org/news/2018/02/wordpress-4-9-4-maintenance-release/
Everyone (in the world) needs to update manually and then make sure auto-updates are enabled again!
----
Over the New Year we had an account compromised (almost certainly through a MILDLY out of date WordPress install) and it was used to attack other servers, leading to a warning from my VM provider.
Going forward, I'm going to be requiring that all WordPress installs be maintained and kept up to date. To enforce this, I've written a scanner that will automatically find and check the version of any WP installs, and it will be emailing me any time someone is out of date. If you have WP on your site, please go update it NOW to at least version 4.9.1.
As WP is a very popular target, even an install a week out of date can be vulnerable, and so I will be disabling accounts if/when that happens. I've already disabled several, and sent emails of warning to many others. If your account was one that was disabled, email me, and I can release it and allow you to update things. Also, please make sure your offsite contact email is kept up to date so that I can contact you in cases like this. Too many times I have to resort to disabling accounts to get the owners attention, and I'd prefer to avoid that.
Sorry to have to be so strict about this, but with the potential to leverage this server to attack remote targets, the threat is serious enough that I have no choice. If you have any questions or thoughts though, feel free to ask below, or contact me directly if you prefer.
Thank you all for understanding!
Well, it's more than a year later, and a lot of accounts have fallen out of date again. I've disabled these. If your site has a notice that your Wordpress was out of date, email me and I'll unlock it, so that you can upgrade.
Note that the current version of Wordpress is now 5.6.2.
:UPDATE:
Just as everyone seems to have finally been updated, Wordpress goes and breaks their auto-update process.
https://wordpress.org/news/2018/02/wordpress-4-9-4-maintenance-release/
Everyone (in the world) needs to update manually and then make sure auto-updates are enabled again!
----
Over the New Year we had an account compromised (almost certainly through a MILDLY out of date WordPress install) and it was used to attack other servers, leading to a warning from my VM provider.
Going forward, I'm going to be requiring that all WordPress installs be maintained and kept up to date. To enforce this, I've written a scanner that will automatically find and check the version of any WP installs, and it will be emailing me any time someone is out of date. If you have WP on your site, please go update it NOW to at least version 4.9.1.
As WP is a very popular target, even an install a week out of date can be vulnerable, and so I will be disabling accounts if/when that happens. I've already disabled several, and sent emails of warning to many others. If your account was one that was disabled, email me, and I can release it and allow you to update things. Also, please make sure your offsite contact email is kept up to date so that I can contact you in cases like this. Too many times I have to resort to disabling accounts to get the owners attention, and I'd prefer to avoid that.
Sorry to have to be so strict about this, but with the potential to leverage this server to attack remote targets, the threat is serious enough that I have no choice. If you have any questions or thoughts though, feel free to ask below, or contact me directly if you prefer.
Thank you all for understanding!
#63
Technical Support / Re: "&skip_scriptaculous=1" No...
Last post by Xepher - July 13, 2017, 10:34:59 PMIt looks like scriptaculous (or at least a compatible version of it) isn't actually being loaded by another script, so the newsbox breaks. The "skip" option was only to skip it if you already load it on your own (or through another script) elsewhere. I suspect that, if it was breaking another script, it's for some other reason than it already being loaded.
Bottom line, you can skip the newsbox if you want, as I don't have the desire to debug it right now. :-)
Bottom line, you can skip the newsbox if you want, as I don't have the desire to debug it right now. :-)
#64
Technical Support / "&skip_scriptaculous=1" No Lon...
Last post by sabao - July 13, 2017, 09:12:43 AMI needed to put it on the so it didn't get in the way of another widget on my site. I'm pretty sure it worked prior to my requested name change, but now the newsbox doesn't really cycle anymore. Also, I took it out to see if the newsbox would work without it and it does.
#65
Technical Support / Re: Name Change
Last post by sabao - July 03, 2017, 01:45:01 PMI think I've fixed it. Thanks so much again for everything!
#66
Technical Support / Re: Name Change
Last post by Xepher - July 03, 2017, 10:39:18 AMOkay, it's done. I had a partially written script to rename accounts, but I haven't used it in a few years, so it broke and I did the rest by hand. The good news is I fixed the script so the next person that asks this should get a much easier (and quicker) response.
That said, I did fix some stuff by hand, so double check everything. Also, you have wordpress, so I modified your basic config to point to the new database name. Note that you may need to change other settings in wordpress to make it work with the new domain name. If you have trouble, just let me know.
That said, I did fix some stuff by hand, so double check everything. Also, you have wordpress, so I modified your basic config to point to the new database name. Note that you may need to change other settings in wordpress to make it work with the new domain name. If you have trouble, just let me know.
#67
Technical Support / Re: Name Change
Last post by sabao - June 20, 2017, 08:33:32 PMHi! Oh don't worry, do what you've got to do.
I've actually already cleared out all the old stuff and moved my site over. I was hoping I could settle the name change before the move, but my previous host will probably expire anytime now so I went on ahead. Will it be a lot of trouble renaming my subdomain while still keeping all the files?
I've actually already cleared out all the old stuff and moved my site over. I was hoping I could settle the name change before the move, but my previous host will probably expire anytime now so I went on ahead. Will it be a lot of trouble renaming my subdomain while still keeping all the files?
#68
Technical Support / Re: Name Change
Last post by Xepher - June 20, 2017, 12:10:07 AMApologies for not replying sooner. I've been traveling far too much for work and haven't made the time to take care of this. I'm once again in an airport waiting on a flight, so won't be able to take care of it today either. That said, I'm happy to rename things. The question is, do you want any of the old site at all? If not, it's easier to simply delete it and create a new account under the new name. Note this will remove all content AND all email (if you used the xepher.net email system.) Let me know and I'll try to get to it in a couple days when I return home.
#69
Technical Support / Name Change
Last post by sabao - June 08, 2017, 03:30:26 AMSo first off, thanks Xeph for fixing the forum email activation problem!
Now the other thing: I own the site account studiopnb. I haven't actually touched it in a while but just came back in the hope of using it again now that I've figured out what to do with it (letting go of my http://www.rycanteras.net domain which I only picked up for school and moving all the content to xepher). I was hoping I could rename the domain to sabao.xepher.net, if possible.
That's about it. I'm surprised my account is still active! Thank you so much for keeping it around!
Now the other thing: I own the site account studiopnb. I haven't actually touched it in a while but just came back in the hope of using it again now that I've figured out what to do with it (letting go of my http://www.rycanteras.net domain which I only picked up for school and moving all the content to xepher). I was hoping I could rename the domain to sabao.xepher.net, if possible.
That's about it. I'm surprised my account is still active! Thank you so much for keeping it around!
#70
Applications / Re: Traitors N' Thieves
Last post by Aetre - February 12, 2017, 02:36:36 AMAll good; we actually got setup on Bandcamp, so we're alright on that. Thanks, though 