No private messages

Topics about modding PSU. The home of the offline project.

No private messages

Postby SenpaiSilver » Thu Jan 31, 2013 8:29 pm

Hi !

I was wondering why the private messages were disabled, I need to get to talk to the staff of PSUMods or whoever is running this board since I found a breach.
The staff members are free to mail me.

Thanks.
SenpaiSilver
 
Posts: 5
Joined: Sun Sep 16, 2012 3:17 pm

Re: No private messages

Postby essen » Thu Jan 31, 2013 8:51 pm

Please post it here.
User avatar
essen
Site Admin
 
Posts: 299
Joined: Thu Feb 16, 2012 12:05 am

Re: No private messages

Postby SenpaiSilver » Sun Feb 03, 2013 5:32 pm

Alright.
I'm going to start with a story first.

Thursday I wanted to come here, look at differents threads.
I'm the type of guy who types the adress I go to when they not bookmarked, I typed psumods.uk first, and it didn't get me anywhere (normal), after that I add the ".co".
What I didn't know is that Firefox added the "www.", I then got access to the whole directory with the board's files and I can easaly download everything.

http://www.psumods.co.uk/ won't get me on the forum, I must remove the www.

The security breach is that EVERYBODY CAN access the PHP in every file.
Even the file that has the database information.

Sorry for the delay, I was expecting some sort of private message/mail.
SenpaiSilver
 
Posts: 5
Joined: Sun Sep 16, 2012 3:17 pm

Re: No private messages

Postby essen » Sun Feb 03, 2013 5:49 pm

Ahah nice! Thanks for the info, this is now fixed.
User avatar
essen
Site Admin
 
Posts: 299
Joined: Thu Feb 16, 2012 12:05 am

Re: No private messages

Postby SenpaiSilver » Sun Feb 03, 2013 10:14 pm

I'm happy that was helpfull.
SenpaiSilver
 
Posts: 5
Joined: Sun Sep 16, 2012 3:17 pm

Re: No private messages

Postby KanameChidori » Wed Feb 06, 2013 6:06 am

Oh I noticed this a month or so ago, I thought it was intended, sorry Essen I would have said something had I known.
KanameChidori
 
Posts: 272
Joined: Sat Jun 16, 2012 5:38 am

Re: No private messages

Postby essen » Wed Feb 06, 2013 1:14 pm

Not a big deal. Nothing was compromised, the database can only be accessed from the server itself.
User avatar
essen
Site Admin
 
Posts: 299
Joined: Thu Feb 16, 2012 12:05 am


Return to PSU Modding

Who is online

Users browsing this forum: Majestic-12 [Bot] and 29 guests

cron