View previous topic :: View next topic |
Author |
Message |
parrotveasey81 Mud Obsessed
Joined: 13 Feb 2009 Odometer: 7480 Location: bradford on avon (wiltshire)
|
Posted: Fri Sep 17, 2010 10:39 am Post subject: my pics have gone
|
|
|
as title,i cant see any of my pics that i have posted,is there a problem my end or difflock end.
i want my pics back
__________________________________ http://www.bloodredoffroad.com/
Angry parrot fabrications,check me out on Facebook |
|
Back to top |
|
|
|
cornish redneck Mud Obsessed
Joined: 09 Oct 2009 Odometer: 3904 Location: bodmin
1997 Mitsubishi Shogun
|
Posted: Fri Sep 17, 2010 10:58 am Post subject:
|
|
|
x2
had to reload my avatar this morning, seems i have a few pics but most have gone.
__________________________________ Founder of the Difflock Ginger Goatee Club! (which seems to be lost somewhere)
Member of the DCJC |
|
Back to top |
|
|
. Difflock Royalty
Joined: 19 Jun 2002 Odometer: 40007 Location: Northern Ireland's Gold Coast
2009 Land Rover 110 CSW
|
Posted: Fri Sep 17, 2010 11:03 am Post subject:
|
|
|
A lot of stuff has had to be deleted to try to resolve the "reported site" issue
__________________________________ Bert the Defender 110 XS - because it's Cool (work it out yourself!)
Lolita the Lightweight
???? the V8 90 CSW
Suzuki DL1000 V-Strom - yes that's right, I have a Zook! |
|
Back to top |
|
|
Twiss Mud Obsessed
Joined: 18 Feb 2008 Odometer: 6438 Location: Birkirkara, Malta
1993 Suzuki Samurai
|
Posted: Fri Sep 17, 2010 11:07 am Post subject:
|
|
|
yeah I noticed a load of users avatars went... was wondering about that
__________________________________ Twiss
'95 Samurai 416 16v
'92 Maruti Gypsy MG410
www.suzukiclubuk.co.uk |
|
Back to top |
|
|
cornish redneck Mud Obsessed
Joined: 09 Oct 2009 Odometer: 3904 Location: bodmin
1997 Mitsubishi Shogun
|
Posted: Fri Sep 17, 2010 11:10 am Post subject:
|
|
|
. wrote: | A lot of stuff has had to be deleted to try to resolve the "reported site" issue |
cheers for clearing that up bud. can we reload them/ find them or do we have to wait for the all clear?
__________________________________ Founder of the Difflock Ginger Goatee Club! (which seems to be lost somewhere)
Member of the DCJC |
|
Back to top |
|
|
parrotveasey81 Mud Obsessed
Joined: 13 Feb 2009 Odometer: 7480 Location: bradford on avon (wiltshire)
|
Posted: Fri Sep 17, 2010 11:16 am Post subject:
|
|
|
. wrote: | A lot of stuff has had to be deleted to try to resolve the "reported site" issue |
great thats my build thread stuffed then
as long as you get difflock sorted i guess a few pics missing is ok.
__________________________________ http://www.bloodredoffroad.com/
Angry parrot fabrications,check me out on Facebook |
|
Back to top |
|
|
Twiss Mud Obsessed
Joined: 18 Feb 2008 Odometer: 6438 Location: Birkirkara, Malta
1993 Suzuki Samurai
|
Posted: Fri Sep 17, 2010 11:19 am Post subject:
|
|
|
Have you not got them saved on your PC parrot?
__________________________________ Twiss
'95 Samurai 416 16v
'92 Maruti Gypsy MG410
www.suzukiclubuk.co.uk |
|
Back to top |
|
|
cornish redneck Mud Obsessed
Joined: 09 Oct 2009 Odometer: 3904 Location: bodmin
1997 Mitsubishi Shogun
|
Posted: Fri Sep 17, 2010 11:22 am Post subject:
|
|
|
Twiss wrote: | Have you not got them saved on your PC parrot? |
thats alot of pics to reload twiss
__________________________________ Founder of the Difflock Ginger Goatee Club! (which seems to be lost somewhere)
Member of the DCJC |
|
Back to top |
|
|
parrotveasey81 Mud Obsessed
Joined: 13 Feb 2009 Odometer: 7480 Location: bradford on avon (wiltshire)
|
Posted: Fri Sep 17, 2010 11:24 am Post subject:
|
|
|
Twiss wrote: | Have you not got them saved on your PC parrot? |
yes but there is no way i am going to try and upload the right pics in the right place.
its just going to make given help/advice on the f78 trak harder as before i could point them to my thread or the right page on my thread
parrot(is going to be not so helpfull from now on )veasey81
__________________________________ http://www.bloodredoffroad.com/
Angry parrot fabrications,check me out on Facebook |
|
Back to top |
|
|
Twiss Mud Obsessed
Joined: 18 Feb 2008 Odometer: 6438 Location: Birkirkara, Malta
1993 Suzuki Samurai
|
Posted: Fri Sep 17, 2010 12:19 pm Post subject:
|
|
|
parrotveasey81 wrote: |
parrot(is going to be not so helpfull from now on )veasey81 |
awwwww
__________________________________ Twiss
'95 Samurai 416 16v
'92 Maruti Gypsy MG410
www.suzukiclubuk.co.uk |
|
Back to top |
|
|
|
paul_c Off-Road Guru
Joined: 17 May 2009 Odometer: 1378
|
Posted: Fri Sep 17, 2010 1:03 pm Post subject:
|
|
|
I guess that's how they compromised the site then - by allowing picture uploads which end up stored and hosted on difflock, someone can upload a virus too - or worse, a script which once its on the 'trusted' side of the site's server, can extract data, do general harm in many different ways.
Simple answer - close the vulnerability. Users can still show pics, by Photobucket, which does the job just as well.
|
|
Back to top |
|
|
its GED Guest
|
Posted: Fri Sep 17, 2010 1:04 pm Post subject:
|
|
|
Twiss wrote: | parrotveasey81 wrote: |
parrot(is going to be not so helpfull from now on )veasey81 |
awwwww |
if they dont sort this, you wont have a website to be helpfull on............
|
|
Back to top |
|
|
parrotveasey81 Mud Obsessed
Joined: 13 Feb 2009 Odometer: 7480 Location: bradford on avon (wiltshire)
|
Posted: Fri Sep 17, 2010 1:25 pm Post subject:
|
|
|
its GED wrote: | Twiss wrote: | parrotveasey81 wrote: |
parrot(is going to be not so helpfull from now on )veasey81 |
awwwww |
if they dont sort this, you wont have a website to be helpfull on............ |
maybe they should do what twiss said a few weeks ago and bring in a optional membership fee to help out with the running cost's of the forum,i know the shop pays for it but it would be good to put back in and help out with cost's.
__________________________________ http://www.bloodredoffroad.com/
Angry parrot fabrications,check me out on Facebook |
|
Back to top |
|
|
its GED Guest
|
Posted: Fri Sep 17, 2010 1:45 pm Post subject:
|
|
|
this is nothing to do with money. theres a nasty little bug running round somewhere.
but seeing as you`re talking about money
this has been thrown in the mix since god knows when. we have had google ad clickfests, offered raffle`s, a supporter function and jeez knows what else. the arguements against are more compelling than the arguements for.
|
|
Back to top |
|
|
Drift Guest
|
Posted: Fri Sep 17, 2010 2:05 pm Post subject:
|
|
|
Pictures are worth a thoudand words
|
|
Back to top |
|
|
Twiss Mud Obsessed
Joined: 18 Feb 2008 Odometer: 6438 Location: Birkirkara, Malta
1993 Suzuki Samurai
|
Posted: Fri Sep 17, 2010 2:15 pm Post subject:
|
|
|
paul_c wrote: | I guess that's how they compromised the site then - by allowing picture uploads which end up stored and hosted on difflock, someone can upload a virus too - or worse, a script which once its on the 'trusted' side of the site's server, can extract data, do general harm in many different ways.
Simple answer - close the vulnerability. Users can still show pics, by Photobucket, which does the job just as well. |
Argh... Photobucket's a PITA...
Although it doesn't matter that much to me as I have my own web server...
We should look into validation of the images rather than changing them...
You could restrict the image uploader to JPG images only.
All *real* JPG images have a Start Of Image (SOI) and End of Image (EOI) byte at the front and end respectively.
It wouldn't be that difficult to verify during the upload process that the images have both of these sections as they are at fixed locations in the files, and have fixed lengths.
To increase the security even further you could check for the Start of Frame (suprise, SOF) as that is relatively near the beginning, and also the Start of Scan (SOS). But the position of this in the file can vary so would increase the upload time slightly.
I don't mind coding it if it would help preserve the upload function!
For me, purely for ease of use!
__________________________________ Twiss
'95 Samurai 416 16v
'92 Maruti Gypsy MG410
www.suzukiclubuk.co.uk |
|
Back to top |
|
|
paul_c Off-Road Guru
Joined: 17 May 2009 Odometer: 1378
|
Posted: Fri Sep 17, 2010 2:29 pm Post subject:
|
|
|
That's the other option - make picture uploads secure. However simply disallowing them and making people use Photobucket is much simpler for the admins. I don't know why you think its a PITA, its fine for me (and a lot of others) and many other forums cope absolutely fine with it. It certainly won't be the death of the forum, and I don't see how money could help unless they were to employ a professional web admin person, which doesn't really happen with forums anyway?
|
|
Back to top |
|
|
Twiss Mud Obsessed
Joined: 18 Feb 2008 Odometer: 6438 Location: Birkirkara, Malta
1993 Suzuki Samurai
|
Posted: Fri Sep 17, 2010 2:33 pm Post subject:
|
|
|
Even if you had to pay 1p a year to use the image upload function, it would stop randomers coming onto Difflock and uploading the images...
Like I say, if you wanted coded just ask...
I feel like I've got much more value than a few lines of code from Difflock already!
__________________________________ Twiss
'95 Samurai 416 16v
'92 Maruti Gypsy MG410
www.suzukiclubuk.co.uk |
|
Back to top |
|
|
parrotveasey81 Mud Obsessed
Joined: 13 Feb 2009 Odometer: 7480 Location: bradford on avon (wiltshire)
|
Posted: Fri Sep 17, 2010 5:50 pm Post subject:
|
|
|
money might not help but like twiss said maybe just have a membership fee if you want to up load pics to here not photobucket,i have never used photobucket and hopefully never will,its just easyer and quicker for me to upload straight to difflock plus it saves my internet useage as im on pay as u go
__________________________________ http://www.bloodredoffroad.com/
Angry parrot fabrications,check me out on Facebook |
|
Back to top |
|
|
SimonWH Guest
|
Posted: Fri Sep 17, 2010 6:40 pm Post subject:
|
|
|
Everything that has been suggested was implemented years ago. the image upload facility does have built in checks. However as this is the only way for 'normal' people to upload files to our server we had to clamp down.
Google flagged up a couple of suspicious events over the past few weeks so we decided to remove all files (images, avatars, attachments) uploaded since August 1st.
As mentioned elsewhere we are just waiting for Google to lift the blockade
|
|
Back to top |
|
|
|
parrotveasey81 Mud Obsessed
Joined: 13 Feb 2009 Odometer: 7480 Location: bradford on avon (wiltshire)
|
Posted: Fri Sep 17, 2010 6:57 pm Post subject:
|
|
|
Simon@Difflock wrote: | Everything that has been suggested was implemented years ago. the image upload facility does have built in checks. However as this is the only way for 'normal' people to upload files to our server we had to clamp down.
Google flagged up a couple of suspicious events over the past few weeks so we decided to remove all files (images, avatars, attachments) uploaded since August 1st.
As mentioned elsewhere we are just waiting for Google to lift the blockade |
i have lost pics from before that??
__________________________________ http://www.bloodredoffroad.com/
Angry parrot fabrications,check me out on Facebook |
|
Back to top |
|
|
N.R.G97 Off-Road Guru
Joined: 09 Dec 2009 Odometer: 1502 Location: somerset.
1966 Land Rover Hybrid
|
|
Back to top |
|
|
N.R.G97 Off-Road Guru
Joined: 09 Dec 2009 Odometer: 1502 Location: somerset.
1966 Land Rover Hybrid
|
|
Back to top |
|
|
nivapulledout Just got MTs
Joined: 30 Nov 2008 Odometer: 363 Location: high seas or New Zealand
|
Posted: Sat Oct 16, 2010 6:32 pm Post subject:
|
|
|
It has been mentioned somewhere else that we may be able to get our pics reinstalled?
All my pics were from before aug 1st!!!! and they have all gone.
please can I have them back
__________________________________ 1986 1600 Niva
1.9 TD Pug,2" lift,Air lockers front and rear,Steel front diff, 31" Silverstone Extremes |
|
Back to top |
|
|
BEERBELLYKELLY Gate Opener
Joined: 29 Jun 2010 Odometer: 14
|
Posted: Thu Oct 28, 2010 11:22 pm Post subject:
|
|
|
add m,e to the list of pictureless punters-
it takes me forever to make them small enough to go on here, photobucket is as much use as a holey bucket as almost all links expire withing a time.
i like to look at pictures here.
if i can help \i will.but in my world any electronic trickery that dows not operate logically meets something that does...its called' MONDAY'
IT HAS A HICKORY HANDLE and a 28 lb head....
|
|
Back to top |
|
|
parrotveasey81 Mud Obsessed
Joined: 13 Feb 2009 Odometer: 7480 Location: bradford on avon (wiltshire)
|
Posted: Fri Oct 29, 2010 6:59 am Post subject:
|
|
|
BEERBELLYKELLY wrote: | add m,e to the list of pictureless punters-
it takes me forever to make them small enough to go on here, photobucket is as much use as a holey bucket as almost all links expire withing a time.
i like to look at pictures here.
if i can help \i will.but in my world any electronic trickery that dows not operate logically meets something that does...its called' MONDAY'
IT HAS A HICKORY HANDLE and a 28 lb head.... |
this is how i now upload pics,it even resizes them for you
http://forum.difflock.com/viewtopic.php?t=56650
__________________________________ http://www.bloodredoffroad.com/
Angry parrot fabrications,check me out on Facebook |
|
Back to top |
|
|
|