RE: [Savannah-users] * RESET YOUR PASSWORD * - And we're back!

[Martin Jernberg]

send the mail to the mailinglist and not me, but iam kind and forwarding it :)

> Date: Thu, 2 Dec 2010 18:54:41 -0500
> Subject: Re: [Savannah-users] * RESET YOUR PASSWORD * - And we're back!
> From: address@hidden
> To: address@hidden
>
> SQL injection attacks suck. I don't know if Savane does this already,
> but you guys should try to keep all the SQL code in a single
> database.php file and provide useful functions so that all of the SQL
> execution can be found in one place and security audits can be done
> more easily.
>
> My 0.00000005 cents.
>
> On Thu, Dec 2, 2010 at 6:14 PM, Martin Jernberg <address@hidden> wrote:
> > ah good you fixed it thanks, to bad lamers destroys great things :(
> >
> >> Subject: Re: [Savannah-users] * RESET YOUR PASSWORD * - And we're back!
> >> From: address@hidden
> >> To: address@hidden
> >> Date: Thu, 2 Dec 2010 19:22:51 +0100
> >>
> >> On Thu, 2010-12-02 at 18:46 +0100, Skami 18 wrote:
> >> > Le 02/12/2010 05:23, Michael J. Flickinger a écrit :
> >> > > Your password won't work and you'll need to request a reset.
> >> > >
> >> > > Recently we were down for a few days due to a SQL injection attack,
> >> > > where
> >> > > user account passwords were compromised.
> >> > >
> >> > > To best protect everyone's account and project data all user passwords
> >> > > in the
> >> > > system have been reset and we've reverted
> >> > > Savannah to its backup from Nov 23rd.
> >> > >
> >> > > A more detailed postmortem will be coming shortly.
> >> > >
> >> > >
> >> > >
> >> > > _______________________________________________
> >> > > Message sent via/by Savannah
> >> > > http://savannah.gnu.org/
> >> > >
> >> > >
> >> > >
> >> > >
> >> > Thanks for your great work !
> >> >
> >>
> >> Thanks for your great work !
> >> People which are against Freedom are a bit non human.
> >>
> >> --
> >> Aurelien DESBRIERES
> >> http://groups.fsf.org/wiki/User:Aurelien
> >> Freedom is not just a word, it's a duty.
> >>
> >>
> >
>
>
>
> --
> - Luiji Maryo (a.k.a. Brain Boy)
> Visit me at http://brainboyblogger.blogspot.com/.