Page 1 of 1
Has the Forum been hacked?
Posted: Tue Jun 18, 2019 12:36 pm
by Mike Olds
Yesterday and this morning I have been getting 'file not found' messages. Once just trying to access the site (certificate out of date); today when I tried to log in (but still I appear to have been logged in) it happened several times.
Re: Has the Forum been hacked?
Posted: Tue Jun 18, 2019 1:44 pm
by AmigoJack
Mike Olds wrote:Yesterday
I can confirm that yesterday (2019-06-17) around 07:00 o'clock (UTC) the SSL certificate for
textpad.com was expired. Now we have a new one, valid from 2019-06-17 to 2019-09-16 (smells like the typical
Let's Encrypt life span, but I don't see it in the certificate itself).
Mike Olds wrote:'file not found' messages
Cannot confirm: yesterday and today I never got a HTTP status 404. Are you sure? Most people nowaday easily mix up unexpected errors just as "file not found" when in fact that phrase was never written anywhere.
Mike Olds wrote:(certificate out of date)
See above - an expired SSL certificate is not a "file not found", and you're still able to ignore it.
Mike Olds wrote:(but still I appear to have been logged in) it happened several times
The board software and cookies saved with your internet browser are unrelated to all issues mentioned, hence the auto-login works as expected.
Posted: Tue Jun 18, 2019 4:07 pm
by Mike Olds
Hola amigo,
Here is exactly what I did, which I just repeated to check:
Reach TP Index site (Yesterday this gave me the "Page Not Found" error message, but today it went to the site without complaint.
Click Log in
Log in
get: "Page not Found" (Not numbered 404, and not titled "File not Found"
hit 'back'/get log in dialogue/'back'
to Forum Index (where, of course it shows I am not logged in)
Refresh or go to a thread where I am logged in
PS: If on the first 'Page not Found" page I click the contact admin button I also get the 'Page not Found' message
While I am at it I might as well mention that I am not receiving notification when someone replies to a thread on which I have posted or to threads I have started.
Posted: Tue Jun 18, 2019 5:17 pm
by MudGuard
forum seems to have moved from
https://forums.textpad.com/ to
https://textpad.com/forums/
But in some places the old host name is still active (log in/log out), thus
https://forums.textpad.com/forums/ is called, which does not exist.
Manually removing the forums. from that url gives the correct page ...
Posted: Wed Jun 19, 2019 12:45 am
by ak47wong
MudGuard, I think you’ll find
https://forums.textpad.com/ is the correct address. The old address was
http://forums.textpad.com/ (without the https).
Posted: Wed Jun 19, 2019 6:13 pm
by MudGuard