D21 Shoutbox Offline For Upgrade - thank you Klass and elevenmil

BuffaloHELP

Jul 21 2006, 05:43 PM

Admins were alerted today regarding strong security threat via shoutbox exploit for all IPB forums. Thanks to Klass and elevenmil, Trap17 forum decided to place D21 Shoutbox offline for the time being. Although the threat did not reach Trap17, I felt it was necessary to take precautious measures as soon as possible, with Klass' guide before OpaQue can update patch files.

The upgrade and security patch for D21 v1.1 to v1.2 will begin shortly. Please be patient and I am sorry for your inconveniences.

Thank you.

Klass

Jul 21 2006, 05:59 PM

Also would be a good Idea for any Trap17 Hosted member running IPB and Deans shoutbox to check the support threads at invisionize and get the update.

This is a extreme exploit. I will not go into detail about it.

All your gaming needs check out Xisto's Game Server:
http://www.ipbgaming.com
Army System 2.1

Plenoptic

Jul 21 2006, 10:03 PM

Luckily you caught this or we might have been in trouble. lol I signed on and I thought UhOh the shoutbox is gone. Nice catch guys. Sadly thought I have to restart the chase for the Shoutbox King but oh well lol

amc

Jul 22 2006, 09:18 AM

Very nice catch, I use D21 as well, now i gotta go change it, thanks for posting this! Otherwise i might've been exploited

JField

Jul 22 2006, 12:30 PM

thanks for this catch

MaineFishing45

Jul 22 2006, 02:52 PM

So if I check Invisionize I should be able to get the update correct? Because I currently have two shoutboxes on sperate sites of mine, anyways thanks for catching this and hope Trap17 can fix this.

What does the threat do? Inject something or scew up the site, like the HELP link did a while back?

gameratheart

Jul 22 2006, 08:33 PM

It is to do with mySQL, but it's not an injection, more of an exploit. Search the Invisionize Forums for "D21 Shoutbox v1.2" and the history will reveal all.

elevenmil

Jul 23 2006, 11:12 PM

http://forums.invisionize.com/index.php?sh...9&#entry1707389

For a quick info on this.

As said update to 1.2 to be safe.

BuffaloHELP

Jul 30 2006, 06:08 PM

The update is still pending until OpaQue's return with better time schedule. Thanks for your patience everybody!

TypoMage

Jul 31 2006, 02:32 PM

I am not trying to rush you Buffalo but do you know when it could be online again?(Or a intelegent guess?)
I am a new member(Obviously) And I would like to check this Shoutbox out.(Is it only a chat or something else?) Thankyou
Oops I missed something else what is this D21 stuff? Do I have to change soemthing on my pc?
I have read some of these posts and people are goning to change something?(Please give me a message)

Sent a PM. Other members: please stay within the topic and let not your discussion revolve around this post.

Latest Entries

BuffaloHELP

Aug 6 2006, 05:49 AM

Well, it's taking longer because OpaQue and I are thinking it's probably better to upgrade the forum from 2.1.6 to 2.1.7 and then update the shoutbox... otherwise OpaQue will be installing the shoutbox twice...

So it's almost done... servers are in top shape and OpaQue is ready to do it in one single step

UPDATE...

Shoutbox is now up and running. Thanks everyone for your patience.

elevenmil

Aug 4 2006, 01:22 AM

It can take awhile if admins are busy...

Myself and Klass over at IPB Gaming alerted admins at trap about the exploit, and although Klass had the fix implemented within hours, his job allows him to have access to the internet continuously. Admins here might not have a load of time to work on it.

ADD REPLY / Got an Opinion!	Remove these ADs!	RAPID SEARCH!	Free Web Hosting	[X]
Express your Opinions, Thoughts or Contribute more info. to help others. Ask your Doubts & Queries to get answers, So that "Together We can help others!"	Register FREE for AD-FREE forum, Create your own topics, Ask Questions, track topics, setup subscriptions & notifications and Get a Free Website w/ Email and FTP.		500MB Space No Ads, CPanel, FTP, PHP, MySQL, EMails - 100% FREE