Dear Rollitup Users,
We at rollitup would like to extend our sincerest apologies for the recent downtime you have received. An SQL injection attack hit our server early in the morning causing a lot of our posts to be overwritten and the site was then redirected. As a result the complete backup that we have is from 20-2-2012 and this is what we had to restore from. We were able to however re-import all the users that have registered in the past month back into the system. But I regret to inform you that the post and threads are not recoverable.
Although we have removed the lines of code that opened us to this SQL injection it pains me to say that we lost a month out of rollitups history and I only ask that you bear with us while we recuperate.
Now you may be asking why we only had a backup from February. This is a good question, with a site such as ours data is our friend but it can also be our enemy. We do not like to transport our live data through the lines of the internet for just this reason, so when we do backup our data we make sure that we only get the pertinent information from the files before we shut the doors and lock them again. However as you can see this is a double edged sword.
As I write this letter our admin and coding team are putting together safe guards from this happening again.
I would ask that all comments and questions be limited to this thread only rather than being spread throughout he forum.
Once again I do apologize for any inconvenience this has caused you and we hope that you still hold us in high regard and trust.
Best Wishes,
Rollitup
i like this.Ima stranger again lol.
This is simply not true my friend. Many users received emails supporting the site we were being redirected to. Not PM's.... Emails to their private email accounts. So 'someone' out there had access to the email accounts associated with our RIU accounts.I repeat, it was a REDIRECT HACK.
That means no data was stolen, no IPs or personal info was taken.
It was a basic hack and it happened to a lot of forums.
Now calm down and smoke some weed
i dont know shit about hacking but i lost 700 posts. oh well.This is simply not true my friend. Many users received emails supporting the site we were being redirected to. Not PM's.... Emails to their private email accounts. So 'someone' out there had access to the email accounts associated with our RIU accounts.
I am not worried about it myself as I created a separate email for RIU. I am also in CA growing legally under CA laws. I'm not worried about anyone coming at me for my 2'x3' closet. I'm not paranoid, I'm not blaming RIU for anything, and I'm not going anywhere else. I'm not saying anything will ever come of some stupid hacker having email accounts other than spam. Just want to set the record strait a bit.
BUT.... to say this was ONLY a redirect hack is simply not true.
The ones receiving emails probably had the "allow users to send emails" checked or something. Of course I'm sure the RIU admins are working to discover what personal information may have been compromised as well as revising their data backup and incident response strategy.This is simply not true my friend. Many users received emails supporting the site we were being redirected to. Not PM's.... Emails to their private email accounts. So 'someone' out there had access to the email accounts associated with our RIU accounts.
I am not worried about it myself as I created a separate email for RIU. I am also in CA growing legally under CA laws. Yes, I realize it's not legal in the feds' eyes, but I'm not worried about anyone coming at me for my 2'x3' closet. I'm not paranoid, I'm not blaming RIU for anything, and I'm not going anywhere else. I'm not saying anything will ever come of some stupid hacker having email accounts other than spam. Just want to set the record strait a bit.
BUT.... to say this was ONLY a redirect hack is simply not true.
am i developing dyslexia or all the words at the end fucked up.i posted months ago about me getting emails thru my riu id and email addres AND THE EMAIL SED SEN MY NAME ON RIU but nothing was done.
againn having to roll bqak tp a febuary backup itrs trully lame and the admins/coders HOULD know better fuk im a coder and i even know to make backups daily or more than once every so fucking often.
user are rated on ther likes/reps new user know that theese people have been around and know a lot,,,and the site does not care about this? nothing was rectefied afterthed oggies thread was delted i kknow members whart lost 4k+ posts anything doen? lol no,
so them user who lost taht many have now lost even more because sum cant e bothered to log inot phpmyadmin adn take a porpper simnpl backup? or what its 1012 set it to autofuckingmatic?
say what u want about this posts but im RIGHT this is bad in soo many ways,
not a mention of recitifing post counts or likes,no cool man