So, the site got taken over for a bit?

[andy83]

I was having trouble logging in the other night and I'm sure most of us have noticed that this sites security was...well breached for a period of time.

Has this issue been fully resolved and are there any other problems that might occur because of it? I logged in a few times and posted while the site was being taken over so I've reset all of my passwords to other sites. Can the moderator detail what, if anything aside from the homepage, was accessed/changed?

Thanks, & Glad the site is back up. I need my miracle fruit fix!

[Albertane]

Yes, the site was hacked on Saturday night.

First of all, your passwords are secure.  They are stored in the database using a SHA-1 hash which would be difficult to reverse.

The hacker was able to gain access to one of my other websites by exploiting a vulnerability in an old open source image gallery that I was using.  The image gallery software is no longer being maintained so there are no security updates.  I have removed that software from the other site.

Using the vulnerability in the image gallery software, they were able to upload a hacking tool and gain access to all of my sites.  The only thing they did though was replace index.html or index.php file on all of my websites.  There were no other changes.

Everything on all of my websites has been restored to normal (except for the image gallery on glyff.net).  You should see no changes or problems on Miracle Taste.  If you do, please let me know.

[Arjibuh]

Thanks Albertane. And, at the risk of being gushy, this blog is very user friendly, you have done a great job.

[Albertane]

Thank you very much.  I'm glad you like this site.

[andy83]

That's good to hear Albertane!

Keep up the good work.