hacked: patch from 8.03
Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=23906
Printed Date: 07 April 2026 at 3:56am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: hacked: patch from 8.03
Posted By: harry
Subject: hacked: patch from 8.03
Date Posted: 24 July 2007 at 1:36am
|
Hello,
I've not been on the forums for a while, was quietly letting my site run with 8.03 and then today it was hacked. Yes I know I should've kept it right up to date, but my site is pretty small and I didn't ever think this would be an issue.
But now that you've gone to version 9 (congrats btw, looks lovely) I don't see any version 8 downloads. Sure I could goto 9, but want to first quickly patch to the latest and securest version of 8 before I look into what is required and what changes are in version 9. So can someone link me to a patch to the latest version please.
Thanks.
|
Replies:
Posted By: WebWiz-Bruce
Date Posted: 24 July 2007 at 8:33am
|
Going from 8.03 to 8.06 would be pretty much the same amount of work as going from 8.03 to 9.0, so you may as well go for version 9 as it has allot more security against XXS hacking.
------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: harry
Date Posted: 24 July 2007 at 3:35pm
|
Ok I'll give it a shot! So how do you upgrade from version 8? I've looked for an upgrade script or instructions on the website and forum and can't see anything??? You always had a guide for previous versions.
Also I think it's a bad idea to remove all links to version 8 downloads. Some people might need access to earlier versions if they are not ready to upgrade to version 9.
|
Posted By: billd3
Date Posted: 24 July 2007 at 3:41pm
|
Tip: First thing I did - extract all the files of 8.06 and burn a CD - even if I screw-up badly, I can always use the original files from the CD........ Download your version, extract the files, burn them to CD in the proper folder structure. Good reference, too. ------------- BillD http://theamcpages.com http://theamcforum.com |
Posted By: javi712
Date Posted: 24 July 2007 at 4:26pm
|
Yes and upgrading takes less than 3 seconds. The upgrade tool is included in the download.
|
Posted By: billd3
Date Posted: 24 July 2007 at 4:45pm
|
Much to his credit the man doesn't seem to leave users hanging out to dry when he makes changes, even major ones.
------------- BillD http://theamcpages.com http://theamcforum.com |
Posted By: harry
Date Posted: 26 July 2007 at 3:06pm
|
Ok, I've just upgraded from 8.03 to 9. It was fairly painless, a couple of suggestions.
1. Within the upgrade scripts strDbTable is hardcoded to "tbl". That's fine for the 99.98% of installations that use the default settings, but it should be one of the install options (if you can change dbo, then you should be able to change this, without going in and editing the code).
2. The install guide on the website in the FAQ assumes the install is for new installs. Fine, but somewhere it should make mention of the upgrade path, cos otherwise some people will be running steps they don't need to make.
3. Finally, Private Messaging and File Uploads are in the "Premium" version only? WTF? This upgrade is for me a major step back. Apart from the interface having a minor refresh I've not noticed any major features or improvements in version 9, I only upgraded due to security concerns and now I find myself with a product that lacks features that I am used to and expect as part of a basic forum package. I think i'll have to look into alternative forums now, for me the site licence is not an option as the website i'm running it on is already running at a loss. Not impressed.
|
Posted By: WebWiz-Bruce
Date Posted: 26 July 2007 at 3:47pm
|
1. This will be looked into 2. This is in hand, but with staff working 12 hour days for the last 6 months some of us do need a break once in a while 3. You can't expect my staff to work doing 1 & 2 for no pay, and expect all the other bells and whistles for nothing!! Staff costs, taxs, servers, phones, software development, support, offices, software, etc. all costs money. Yes you can get other forums for free, but do they include telephone support, new regular versions, high level of security, 1 hour support ticket response, supports from qualified developers, and a 2 hour patch policy for any reported vulnerabilities. Web Wiz Forums is aimed more at the heavy user and business users who need a stable product, high level of response, good technical phone and email support, and a secure and robust package. For the home/novice user there are plenty of free forums around with online community support that may or may not have bugs fixed by someone in their spare time, and you may or may not get a support question answered by the middle of next week, by an unqualified user who is having a stab in the dark. The fact that we have a free version at all which is supported through our online support forums should be a bonus, as novice home/users get a high level product without having to shell out. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: harry
Date Posted: 27 July 2007 at 6:26pm
|
Points 1 & 2. Great, wasn't a criticism, just making a suggestion on how to make things clearer for people. I know myself from various projects that it's easy to overlook things when creating new programs and features, and documentation is often the last thing to get done. So just wanted to help. Well yes it's great that you provide the forum for free, and what's more all the other applications on WebWiz and that you have for years. I know you and your staff deserve financial support for all the great work you've put into your programs and I do honestly hope it makes you rich (something has to make up for living in Bournemouth!). I just feel as the web matures more and more applications take the paid route, and I think that is a shame. But we all have to pay our bills so I can't really blame you. However, I still think taking out features that were available for free in previous versions is going a step too far. I also think you should keep the old versions onsite to download, sure say "these are old versions and we no longer provide support", but at least give people the choice to keep using them if it provides them with something they are used to. |
Posted By: WebWiz-Bruce
Date Posted: 27 July 2007 at 6:42pm
There were 4 options on the table to be able to move ahead and keep the company going into the future;
To also compensate new licensing options have been bought out, including a Hosted Solution of the Web Wiz Forums Premium Edition for as little as £2.49 per month. I can't see how people can argue with that as for less than the price of a Big Mac each month you can have not only the Premium Edition but also we look after the installation, upgrading, and hosting for you. All hosted on our super fast Gigbtye Network, with multiple Intel Quad-Core Xeon Servers, with nightly off-site backups, 24/7 monitoring and technicians, and a 99.9% SLA. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: harry
Date Posted: 29 July 2007 at 6:35pm
Well I've never eaten a Big Mac in my life and wouldn't eat one even if it was free. So not the best analogy in my case, but I agree it's good value nonetheless. 
I agree that option 4 is the preferred one there, but I think taking out so many features that were already part of the existing application is a mistake. File Uploads I can see as a "pro" feature and fair enough to make paid for. But I think private messaging is something people expect in the most basic solutions and should have been left in the basic version.
But in the end of the day it's your program and you can market it any way you see fit. If you feel you have to do these things to make the forum profitable then that is entirely your prerogative and good luck to you.
Is version 8.06 still available for download as I think for me right now it would be the best option as the forum i'm running is on a non-profit site (and indeed is costing me money).
|