I hope no hacking is involved but I also know that spammers and their
bots are relentless. I do check to be sure the site is not blacklisted
and also monitor the stats as best as I can. A couple of years ago I
blacked listed all of China in the .htaccess. I've had two security
breaches in the past that I know of - the worst was caused by a weak
password (my fault) and one was caused by a weakness in shared hosting
(another user on the same server was able to gain access to my account.)
The first breach (a long time ago - I don't even remember when) was the
worst and did get the site blacklisted for a while, which is when I
learned it was a good idea to monitor the blacklists. But that is sort
of like checking on your health by making sure you are not in the
obituaries!
Mark
On 10/2/2014 12:32 AM, Darren Addy wrote:
I've learned, through administering some company wordpress sites that
one really needs to stay on top of upgrading to the latest releases
(of everything: Wordpress, themes, plug-ins, etc.) I imagine the same
is true of just about any software out there (Drupal, Joomla,
b2evolution, etc.)There are vulnerabilities that open up and bots are
written to look for those vulnerable versions and exploit them.
Checking the Changelog of your software will often be informative on
what improvements have been made and sometimes what vulnerabilities
have been patched:
http://www.longtermfix.com/test/blog/doc/changes.html
Googling: "b2evolution [your version number] vulnerability"
will also give some insights into what might have happened. It looks
like b2evolution has been vulnerable to SQL injections and so that
would be my first guess. In some cases the vulnerability results in
your site being used to spam which ends up getting your site
blacklisted by your web host or Google or other sites.
That being said, you will surely find more knowledgeable people on the
b2evolution forums.
On Wed, Oct 1, 2014 at 11:14 PM, David Mann <dmann...@gmail.com> wrote:
On Oct 2, 2014, at 5:00 am, Attila Boros <attila.p...@gmail.com> wrote:
Ouch! Your host should also have backups, but it's a good idea to make
your own backups for a little added safety. If your version is 5 years
old, maybe you can't upgrade directly to the latest version, but
better ask their support / forums.
My advice with backups is to never trust a hosting provider to do them for you,
even if you're paying for it. Also restoring files can be expensive. A
company I used to work for found that out; after that we set up our own remote
backup system which proved quite useful in the long run.
Attila's advice about the upgrade is good, maybe you can upgrade incrementally provided
you can get hold of the intermediate versions. I've been involved in difficult upgrades
like that before - all I can say is "good luck" :)
Cheers,
Dave
--
PDML Pentax-Discuss Mail List
PDML@pdml.net
http://pdml.net/mailman/listinfo/pdml_pdml.net
to UNSUBSCRIBE from the PDML, please visit the link directly above and follow
the directions.
---
This email is free from viruses and malware because avast! Antivirus protection
is active.
http://www.avast.com
--
PDML Pentax-Discuss Mail List
PDML@pdml.net
http://pdml.net/mailman/listinfo/pdml_pdml.net
to UNSUBSCRIBE from the PDML, please visit the link directly above and follow
the directions.
