olyclimber

I was set to "auto" when the spam attack happened....

They just keep coming!  🤪

2 hours ago, Clover13 said:

@cmer and @olyclimber what were you set on when you got hit?  Auto or Difficult?

I was not set on difficult.  I tried to change that setting this morning but it didn't take for some reason in Safari...seems to work in Firefox.  But in Safari it was just letting people in with a checkbox.  I didn't test Chrome or Edge because I ran out of time and I have to get to meetings. I assume this is a problem with hCatpcha not Invision?  IDK.  But not like there is a lot to it...just grab the key and the secret and plug them in.

I'm not sure why I was having the above issues but for now I'm still set to manually approve till I get time to look at it. 

Yeah I had hCAPTCHA enabled and got over 17 pages of fresh spam this morning and like 15 new spam registrations this morning.  I've turned off new registrations till I can figure out something...or actually set to admin approved only.

This is a problem.  Hopefully either Invision or the Invision Community/user base can share some real solutions ASAP.

Prevent spam would be at the top of my list!  😉

I'm for anything that helps with this, whether it is AI or something else.   Just deleted 17 pages of spam all posted this morning.  I'm just doing admin approved registrations at the moment till I figure out a path out of this.  

I would like to reply to this thread just to encourage Invision to continue to offer self hosting options and as new features come available I would like to see them available to self hosting customers.  I’m a big fan of this software, and but I do by far prefer the self hosting option.  I appreciate the hosted option, but it is not what I prefer.  

I am @Jim M. If I had to do any other community forum (I'm considering starting another) I would choose Invision every time.

I had to check up on ole UBB...last version update was in 2020.  Yeah we made the right call getting off that platform.

LOL...yeah our Forum has been around for a while (since 2001).  Originally was UBB.threads!  I just checked and was actually surprised to see that UBBcentral is still kicking, though they still haven't made it to PHP 8.

I think we switched over in 2016 actually.

Anyway, thanks for the background folks!

Thank you @Marc Stridgen .  This was actually an htaccess protecting the uploads directory.

It was actually causing me an issue with an app, so good to know it is no longer necessary:

#<ipb-protection>
<Files ~ "^.*\.(php|cgi|pl|php3|php4|php5|php6|phtml|shtml|([a-z0-9]{32}))$">
    Order allow,deny
    Deny from all
</Files>
#</ipb-protection>

I assume to prevent scripts being run?

Looking at my forum (I inherited it, so I dont' know all the history), it has somethings secured with .htaccess files that appear to have originated from an IPB script or install.  The reason I say that is that they start off with "#<ipb-protection>".  I also have search a bit and it looks as if perhaps in the past in the ACP there was a place to configure htaccess?

I set up a minty fresh test install of IPB and in it I don't see a single htaccess file.   There is also zero mention of htaccess in the installation guide or in ACP that I can find. Am I not looking in the right place?

Has what htaccess delivered been replaced with another method or practice?  Pardon, I don't know the whole history of IPB, but I'm wondering if I still need to retain the htaccess files that are in place, or can they be removed as the forum software has been hardened in other ways?

Thanks in advance for any guidance here.

@Marc Stridgen  the reason I had PMd was because it was not made clear that he was actually working actively on my forum (which was down at the time). So time was passing and I had no idea what whether I should continue working the issue or if he was actually looking at it.  I'm sure you can imagine that would be a stressful situation.

And he did respond there, so once that line of communication was open I naturally expected an update there. I was not aware of protocol/policy as far as updating only via forum post versus PMs.   A little bit of communication in a stressful situation can go a long ways.   

But my apology stands, live and learn.   Thank you for your follow up and I really do like this forum software and appreciate all the help I get here.

I resolved my permissions issues last night completely, it took a couple minutes.

I went for a long bike ride and thought about this situation and if you don't read anything else,  I apologize for my rudeness/being angry @Jim M .  It was totally my fault.

I work a job where I'm compensated for giving "white glove" support for extremely complex software and I imagine supporting these forums (given what a bargain the license is) that you are not compensated enough to put up with some jerk forum owner...or even to go any sort of extra mile.

The reason I was frustrated (not an excuse) was that I had opened up a channel of communication with you (PMs) and thought (mistakenly) that you would respond to our PM exchange there when you figured things out. You did not and I waited an hour for a response there, not looking anymore into the issue as I didn't want to interfere with you work. After an hour, I messaged you and when you didn't respond, so it took me about 3 minutes to figure out that the Forum and Gallery app folders were old and not updated for some reason (probably permissions) when I uploaded whole ips_ folder using Filezilla.

Instead you had posted up your finding in the Forums in the original thread, and for whatever reason I didn't get a notification to that fact so I never checked.  

I guess another reason I was frustrated is because I asked you for something simple I could check and I could have figured out the issue pretty quickly.  Instead it seemed like you didn't want to provide that info but instead refused to work on the problem unless I updated the access you have to my board.  But really given that I knew I had a perms issue I should have known where to look (\applications\forum and applications\gallery) for file version/dates.  And again, I'm guessing your not paid enough.

When your board is down its a little stressful, no matter how big or small your forums/active user base is. I was irritated that you never responded to my PMs, but I guess it wasn't something you would normally do.   In my job I would, but again, you're probably not paid enough to worry about that sort of thing.

Yes, there is a permissions issue with my board involving root, as I said I just inherited this board and it is something on my list to fix...perhaps I should move it to the top since it will easy enough.

So,  that is my long winded explanation.  Sorry, my fault, and have a nice day.

I fixed it without your help. Thanks.

Can you confirm you got my message: i updated the access info. it should all correct now.

Me too!

Updated the info...let me know if you can't get on to look.  @Jim M

OK...where do I update the FPT/SFTP access detail?

I did do this:

"upload the contents of the "ips_****" folder to your server, overwriting what is there."

or maybe you can just tell me a file to check?  Filezilla told me that all files uploaded successfully..but obv something is wrong 🙂

After my botched upgrade in the console i went the manually uploaded all the files it told me were not present.  That allowed me to upgrade the SYSTEM.  But Forums and Gallery were not uploaded, so I followed the manual upgrade process and downloaded the full install and uploaded the whole IPS.  But now i'm stuck in this state.

Hmmm...i copied them up!  I'll check admin/upgrade

see how they are not upgraded?

I'm not online yet @Jim M  ! did the manual route, but still getting this:

https://cascadeclimbers.com/forum

what am i missing to turn the forum back on? I've been scouring the backend looking for a switch..

Oh...I see...manually copying the new files over didn't upload so my framework still sees the forums and gallery as running the old version...is there a tar of just the forums and gallery I can get?

yeah I made the mistake of pressing the big red button and now my forum is down lol.

live and learn, I think i'll stick to what i'm used to in the future (manually updating).

thanks @Jim M, that is the route I was taking. I'll mark solved when my board is up!

So I was going to apply the latest update, and I got this message for some files:

"If you are sure the files have been uploaded correctly, make sure the permissions are set correctly on them."

The files are there, so I assume it is permissions.  Looks like they are all 644. What should I change them to in order to be "correct"?

Thank you!

Well, it still would be nice is HEICs would just render as is...so I'm going to hold out hope for that!

Since this is such an old thread thought I would just test it...so is there function now in place that when you are uploading an image from iphone as HEIC that converts it to jpg?  It appear so...though If I do it via my computer it just adds it as an attachment and doesn't convert.

Also watching this and would love support for HEIC.   Lots of users posting them, I have to tell them to convert to JPG or whatever, would make my life so much easier to have HEIC support.