You are here

Error 500 on older private messages

4 posts / 0 new
Last post
TechAUmNu
Offline
Last seen: 4 days 3 hours ago
VESC Free
Joined: 2017-09-22 01:27
Posts: 574
Error 500 on older private messages

I can't open any of my private messages apart from the latest one. Mildly inconvenient lol

TechAUmNu
Offline
Last seen: 4 days 3 hours ago
VESC Free
Joined: 2017-09-22 01:27
Posts: 574

Ok can't open any now at all... amazing!

benjamin
Offline
Last seen: 5 hours 3 min ago
VESC FreeVESC OriginalVESC Platinum
Joined: 2016-12-26 15:20
Posts: 487

This should work now. It seems that the site was hacked and some code was inserted into the first line on several php files, which caused that error and also made forum replies brake a while ago. As far as I know the problem was that the permissions on the webserver were wrong, but I still don't know what caused the leak in the first place. Most likely it happened somewhere between the security updates for the installed drupal modules. I checked all logs on the webserver, and it does not seem that anyone other than me has been in there.

Roger Wolff
Offline
Last seen: 5 months 3 weeks ago
VESC FreeVESC Original
Joined: 2017-05-24 12:27
Posts: 202

Escalating from "local privileges" to "root access" is trivial according to some people (i.e. people with the right skills can always do that). So it remains possible that the hackers escalated their privileges to "root", wiped the logs and since then use a form of access that doesn't log in the usual places..... 

These things are scary....