PDA

View Full Version : NOTICE: Do not visit Uploadz for now



timROGERS
08-03-2007, 05:51 PM
Uploadz has been hacked. Please do not visit in case any Windows exploits are added.

ZAG
08-03-2007, 05:52 PM
Lol. Bad luck.

Nemo
08-03-2007, 05:54 PM
i only ever visited it if imageshack failed me :P

F32
08-03-2007, 06:02 PM
They used images from freewebs - you really think they're THAT smart?

beer
08-03-2007, 06:03 PM
i use my own neway.....

timROGERS
08-03-2007, 06:04 PM
Uploadz is still their at www.uploadz.co.uk/index.php, so their a bit dumb. They haven't deleted users uploads yet, so things are OK so far.

I've contacted Danny irl and hopefully he'll sort things out soon.

Invent
08-03-2007, 06:04 PM
Congrats at above post?

I hope you have a backup, was a good script.

EDIT: Good to see the files are still there :)

jarhead!
08-03-2007, 06:05 PM
why was you hacked?

Blob
08-03-2007, 06:16 PM
Uploadz is still their at www.uploadz.co.uk/index.php, so their a bit dumb. They haven't deleted users uploads yet, so things are OK so far.

I've contacted Danny irl and hopefully he'll sort things out soon.

I found that link :(

the wombats
08-03-2007, 06:19 PM
tim do you have cpanel to it? coz i do if you need anything doing.

edit; the file has now gone. whatever was on the page has gone.

Luckyrare
08-03-2007, 07:37 PM
Sorry about this guys. I am checking though access logs but please dont think we are dealing with "uber hackers". There is no problems with the code and all ftp, emails have been changed. I have also deleted all spare php files and spare dirs.

I have blocked myself and craig out from the Cpanel for a day or so while I can fully scan my computer. The BETA was not damaged by this as it is on a different server.

Sorry guys <3

iJoe
08-03-2007, 09:07 PM
so is it safe now?

F32
08-03-2007, 09:08 PM
so is it safe now?
common sense is man's best friend, not dog.

Yes, it is.

benjamin
08-03-2007, 09:11 PM
i used it today

dno what time tho. oops.

F32
08-03-2007, 09:12 PM
i used it today

dno what time tho. oops.
you'll be fine :)

Luckyrare
09-03-2007, 08:00 AM
Zip, rar, fla, psd file formats have been disabled as well as the mysql logging and a few zip/rars have been deleted (that have the suspected Linux, Windows PHP exploit in) until tonight when I make a fix. I am pretty sure I have found the exploit but not sure how it fully works. They didnt embed anything into the page so nothing to worry about.

Sorry about the 4 formats I have disabled and I will get them back and running by 4-6PM

[Chris]
09-03-2007, 10:18 PM
Sorry about this guys. I am checking though access logs but please dont think we are dealing with "uber hackers". There is no problems with the code and all ftp, emails have been changed. I have also deleted all spare php files and spare dirs.

I have blocked myself and craig out from the Cpanel for a day or so while I can fully scan my computer. The BETA was not damaged by this as it is on a different server.

Sorry guys <3

soz, ouch about it though. its probably some randomer who got angry because he couldnt upload a .virus file.

Twas' a good upload site

Luckyrare
09-03-2007, 10:23 PM
soz, ouch about it though. its probably some randomer who got angry because he couldnt upload a .virus file.

Twas' a good upload site

Nothing to be sorry about, its up. BTW guys, zip/rar has been re added ;)

Oni
09-03-2007, 10:27 PM
soz, ouch about it though. its probably some randomer who got angry because he couldnt upload a .virus file.

Twas' a good upload site
Why would Xeoro do that?

Luckyrare
10-03-2007, 10:06 AM
I found it, nice explote who ever uploaded it. Ill tell you what it was just so you guys know what to look for.

If you make file.php.rar some how you can execute it, I never knew this. I found it very funny how some people tried to explote it by making images php in. Now Uploadz does track user information but I am not going be a gimp and ban IPs because its in beta

Patched.

Rockstar
10-03-2007, 10:20 AM
i only ever visited it if imageshack failed me :P

Same LOL :P

Want to hide these adverts? Register an account for free!