Site bugged

[Rucagorn]

Not sure what is happening wit the site all characters have the name test!





Latest Item(s)
Greater Elf-stone of Strength
test
for 252
Greater Elf-stone of Heart
test
for 9
Greater Elf-stone of Spirit
test
for 38



By Level
1-9 (393)
100.0%



By Race
Ancient Sky (392)
99.7%


Man (1)
0.3%



By Class
(392)
99.7%


Captain (1)
0.3%

[Rucagorn]

Found this!

Greetings,

At around 2:30am EST a broken query allowed a SQL Injection that caused an update to be run against the table that stores character data. We have a backup of the table and we are working to restore the data. When the data is ready to be restored we will need to take the site down again for 15-20 minutes while the update runs. In the interim we did not feel it was necessary to have the entire site down since we are confident there is no active security issue.

Note: We've disabled automated Armory imports and manual imports until the data is restored.

We've found the immediate source of the issue and we've fixed it. Our monitors logged the activity of this user and we will be taking the necessary legal actions. This SQL injection is not an active security issue. The issue effects this query type and this table only.

We are going to perform a system review to check for other instances of similar issues. The source of this injection was a poorly formatted query. We've spot checked other functionality related to it and they are not vulnerable to the same issue.

We're very sorry for the inconvenience. We have a backup of the table and we are working to restore the data. In the interim we did not feel it was necessary to have the entire site down since we are confident there is no active security issue. Your character names will be back to normal soon and we will post the results of our system review when we are done.

-Stephen


Need to wait then

[Rucagorn]

Damm test has a lot of points now! He gona get all gear

[Rucagorn]

DONT edit your characters! Let them restore!