TUGBBS under attack again

[TUGBrian]

the host now things its related to a micro patch in the PHP version running on the site. though im not terribly sure on the solution.

 

[pedro47]

I feel now it is related to an ADS Blocker issue.

 

[pedro47]

I can access TUG Forums on my Apple iPad’s and my Samsung Tablet, using DuckDuckGo. I’m using it right now. This is so strange.

 

[TUGBrian]

I believe at this point the host has nailed down the issue pretty well, and explained why its so sporadic.

im likely going to just try to update xenforo in hopes that it fixes the older code in reference to php and eliminates the problem completely.

unfortunately the update is a MAJOR revision to xenforo, and those are always a real treat when you have a forum with so many custom modifications...it could break more than itll fix!

 

[Patri]

Brian, do you know a lot more about technology now, than when you took over for your dad?

 

[TUGBrian]

thats a tough question to answer. when I took over yes, as I was in the IT field for years.

now, being out of it for 20+ years there have been multiple generations of technology that have passed me by!

 

[Old Dog]

Brian,

I’ve been on the board using Tapatalk off and on all day and haven’t hit any of the 403 errors. For weeks prior (months?) I would get multiples every session. Have you made changes in the last day or two?

Old Dog


Sent from my iPad using Tapatalk

 

[TUGBrian]

no changes have been made, it really is a wild issue caused by 2 lines of code. apparently noone is quite sure what process or request triggers one or both of those lines but the way it was explained to me whenever those two lines are triggered (the code is within the forum software)...the current version of php does not like it and it generates the error.

 

[T_R_Oglodyte]

Just now, using my laptop and Firefox, the What's New link opened normally. I right clicked on three links to open them in a new window. The first opened normally. The other two timed out with an "Unable to open" message. When I reloaded I got the same message right away. Upon reloading again, they opened normally.

Meanwhile, the the "Alerts" icon at top right said I had 6 messages. I tried to open several of the links from the Alerts drop down; all 3 of them immediately returned a 403 error. Same thing on first reload. Second reload they opened normally.

 

[Ken555]

Just now… on tapatalk. In addition, I've had numerous issues attempting to login via tapatalk over the last week and mostly ignored it and haven't been on tug much because of it.


Sent from my iPad using Tapatalk

 

[TUGBrian]

my only guess is that the tapatalk plugin accesses that particular code that php does not like far more frequently than any other request!

 

[pedro47]

This is weird I can access TUG Forums using Google Chrome, Microsoft Edge.on my Two Apple I-pads devices , and on my Samsung Android. I can use DuckDuck.com to access TUG Forums using my Two Apple IPads devices , and my Samsung Android.

Now, on my new Dell desktop, I can access TUG Forums using Google and Microsoft Edge.

But on new Dell Desktop using DuckDuck.com. I received the Forbidden Message you can not access TUG Forums . You do no have permission..

However, using my new Dell Desktop and using DuckDuck.com I can access the following: TUG Reviews, Join TUG, Help & Advice and Rules.

This is so weird.

 

[HitchHiker71]

View attachment 127002

Just now… on tapatalk. In addition, I've had numerous issues attempting to login via tapatalk over the last week and mostly ignored it and haven't been on tug much because of it.


Sent from my iPad using Tapatalk

Yeah I'm back to getting Forbidden in Tapatalk more than anything else now, along with the above error(s) when trying to pan down to view the newest posts within a thread when it does actually load the thread initially, or when trying to reply to a post using Tapatalk - which is especially frustrating as I've lost the entire post I wrote up in the process at least three times now - which is new for me - and of genuine concern - losing content is never a good thing.

 

[TUGBrian]

currently going thru the motions to see what all we need to do with the add ons to upgrade to 2.3 as its a major revision/upgrade.

 

[HitchHiker71]

no changes have been made, it really is a wild issue caused by 2 lines of code. apparently noone is quite sure what process or request triggers one or both of those lines but the way it was explained to me whenever those two lines are triggered (the code is within the forum software)...the current version of php does not like it and it generates the error.

Does TUG run on Xenforo? If so do we have the most recent Tapatalk plug-in for Xenforo installed?

https://www.tapatalk.com/download_xenforo

Sent from my iPhone using Tapatalk

 

[TUGBrian]

it does yes...and it is the most updated version of tapatalk running.

 

[HitchHiker71]

currently going thru the motions to see what all we need to do with the add ons to upgrade to 2.3 as its a major revision/upgrade.

That might explain why we are seeing issues with Tapatalk if the forum software isn’t running the current version of a piece that Tapatalk is reliant upon (2.3). I often see issues even if the software is only a point release or two behind current versions due to security limitations and sensitivities these days that makes for having to constantly stay on top of upgrades and patches as a result.


Sent from my iPhone using Tapatalk

 

[TUGBrian]

its the xenforo software that is a few revisions behind (2.2 vs 2.3)...however tapatalk is at the latest version for 2.2

 

[dioxide45]

When did you last update Tapatalk? The issue, as I understand others pointing out, is that the newest version of Tapatalk for Xenforo isn't fully backward compatible with older versions of Xenforo.

 

[TUGBrian]

not terribly sure. I just confirmed that for the version of xenforo we are on...we are using the latest version available for tapatalk (ie there isnt anything to upgrade to). its been installed for some time so if it truly were tapatalk as the issue i think this would have manifested itself long ago.

 

[Ken555]

not terribly sure. I just confirmed that for the version of xenforo we are on...we are using the latest version available for tapatalk (ie there isnt anything to upgrade to). its been installed for some time so if it truly were tapatalk as the issue i think this would have manifested itself long ago.

It's probably related to the security enhancements recently made, as per your earlier post.


Sent from my iPad using Tapatalk

 

[dioxide45]

Was the Ignore More add-on removed?

 

[dioxide45]

I'm seeing this message every time I try to go to the You're Being Lied to About Electric Cars thread. I normally have that thread on ignore, but it isn't right now because it seems Ignore More is gone.

 

[TUGBrian]

ah ha! was hoping something like that would come up!

as part of the upgrade to a new version of xenforo the instructions indicate to disable all add ons, then run the upgrade (then go back and update/reenable the add ons)

I was curious how the ignore add on we installed was still working...and if it would even be needed when we upgrade to 2.3 (as now xenforo provides the option to ignore users).

 

[dioxide45]

I was curious how the ignore add on we installed was still working...and if it would even be needed when we upgrade to 2.3 (as now xenforo provides the option to ignore users).

I believe Xenforo allows for ignoring other users by default. Even the current version. Ignore More adds the option to ignore threads or entire forums too. I am seeing all kinds of threads in my feeds that I wasn't seeing before because the thread or forum is on ignore.