Alan_K wrote:fecc-mechanic wrote: ↑Sun Sep 29, 2024 2:34 pm
You're Welcome !!! I am working 24/7 to get it fixed, I again apologize to everyone for the inconvenience.
I was pleased to see these posts as I thought it was just myself. The pleasing stopped quickly when I realised why.
The search feature seems strange to have a vulnerability of getting hackers into a site, on the face of it, but I mean that in the sense they're not adding like a file upload or image upload.
The get around for now is using googles site search, so if you want to know about anything elvis 1954 on here just type, "elvis 1954 site:elvis-collectors.com" and you'lll get the results on google with each result linking back to this site.
Are there file extensions used in a search that enable people to hack a site? Could you not just disallow any searches that contain a list of file extensions? Sorry if that's a bit naive of me, just typing out aloud.
Thanks, Alan, for your tips for members re: Google at this time in searching the site while the built-in function is still remaining to be cantankerous in bringing back.
As for POE (point of entrance), it wasn't via a file per se (as you mentioned) , but a vulnerability that was just (?) Internally officially recognized... I can say that publicly now, as the vulnerability has been patched on our end. That is why I was understandably silent over the root cause until now.
The work now remains rebuilding the search index and functions (which is a massive undertaking with a site with as many posts as fecc) while not affecting site performance.
It WILL be back. It's just taking longer than expected.
All we ask is for you and the rest of the fecc memberships' patience as we continue to undertake this massive task.
Sent from my SM-S928U using Tapatalk