You are here

Error 500 on older private messages

4 posts / 0 new
Last post
TechAUmNu
Offline
Last seen: 3 weeks 2 days ago
Joined: 2017-09-22 01:27
Posts: 575
Error 500 on older private messages

I can't open any of my private messages apart from the latest one. Mildly inconvenient lol

TechAUmNu
Offline
Last seen: 3 weeks 2 days ago
Joined: 2017-09-22 01:27
Posts: 575

Ok can't open any now at all... amazing!

benjamin
Offline
Last seen: 2 days 21 hours ago
VESC FreeVESC OriginalVESC Platinum
Joined: 2016-12-26 15:20
Posts: 490

This should work now. It seems that the site was hacked and some code was inserted into the first line on several php files, which caused that error and also made forum replies brake a while ago. As far as I know the problem was that the permissions on the webserver were wrong, but I still don't know what caused the leak in the first place. Most likely it happened somewhere between the security updates for the installed drupal modules. I checked all logs on the webserver, and it does not seem that anyone other than me has been in there.

Roger Wolff
Offline
Last seen: 1 year 10 months ago
VESC Original
Joined: 2017-05-24 12:27
Posts: 202

Escalating from "local privileges" to "root access" is trivial according to some people (i.e. people with the right skills can always do that). So it remains possible that the hackers escalated their privileges to "root", wiped the logs and since then use a form of access that doesn't log in the usual places..... 

These things are scary....