Any word on cohfaces??


Blackleviathan

 

Posted

Quote:
Originally Posted by Blackleviathan View Post
It's still redirecting me to the paragon wiki site :/
This is turning into a longer-term fix than we anticipated.

The nutshell version is that it was running on a really old version of CodeIgniter, a version that had a serious security flaw that allowed people to upload arbitrary files--including php files--in addition to just images. To be blunt, this security hole in Faces was the attack vector used to compromise the sites a few weeks ago.

In addition, certain warnings and errors were turned off that, in light of recent events, I'm not willing to compromise on leaving off. One of the biggest issues we're seeing is that there are a lot of places in the codebase where it is assumed that Php will return NULL if a non-existent array index is accessed. With notices and warnings turned off, Php will silently do so; however, it's not a best practice. As a result of these types of issues and a few others, mainly database class tweaks in the newer version of CodeIgniter, we're having to make some major changes in the back-end codebase of Faces before we can turn it back on.

So when it all adds up, it's probably still going to be a while before we get Faces back up and running. I'm really sorry for the inconvenience, but especially since it was the attack vector, until I'm 100% sure that it's functional and not exploitable again, I'm being really paranoid about it. The best answer I can give is Soon™.

I also want to be careful that I don't convey the notion that we're not working on anything else. There was a major update to City of Data recently. We're still stamping out a few lingering bugs from CIT, another site that underwent an upgrade similar, but not so drastic, as Faces. We're also still actively developing a pretty major revamp to all the sites that make a lot of these issues moot and add some cool functionality. Plus, of course, updates to the game itself are causing our devs to work overtime in making sure everything is maintained. We've been pretty busy at the Titan Network, and we'll continue to do so.


We've been saving Paragon City for eight and a half years. It's time to do it one more time.
(If you love this game as much as I do, please read that post.)

 

Posted

Keep up the good work TonyV and the rest of the ParagonWiki staff. I don't mind a little wait.


Going to miss the fun and nice people here at CoH. Feel free to add me on PS3/XBox360
PS3X360: OmniNogard
Currently playing: Mass Effect 3(PS3) Minecraft(X360) Skyrim(X360).