Regarding UOLedger.com and Security

[Wallenstein]

I became aware of a site problem a couple of weeks ago that I had temporarily fixed while working on enhancing UOLedger.com's security and backend. Shortly thereafter, due to overlooking one minor loophole in our site's permissions, somebody was able to place malicious code onto our site's index files resulting in visitors receiving security warning messages up the wazoo.

When I found out about this I took down our main index.php file that every page was based on and replaced it with a maintenance message. For some reason people are still getting security prompts and I've therefore taken the entire site offline until I find out exactly what scripts were modified and can remove any and all malicious code.

The second I fix what went wrong the site will be back up and we'll pick up where we left off (just days before the UO: SA launch). I regrettably encourage you all to stay off of UOLedger.com for the time being until it's officially back up to avoid any potential security issues.

I'm sifting through heaps of backups trying to find a working and up-to-date file that can be used in place of the current maliciously-modified pages. I'll post when it's up..

I just wanted to give you a heads up after seeing the other thread had been closed.

Thanks,
Brian / Asimo

 

[Taylor]

Thanks for your update, Brian. I sure hope the Ledger is recoverable.