Hey all,

I've attempted to access Worth1000.com and have been having trouble since 5:00 this evening. I've just found out that the site has been hacked into. Does anybody have more info on what happened?

archfiend

I only know what it says when I try to go to Worth.

I'm not overly concerned, because I use a number of different passwords, so I'll just have to change my Worth password when I can finally log back in.

yeah, its' a Chinese hacker using an exploit that injects SQL into our database. They changed some content on our server to point to their own, which screwed up our layout. But if they were able to do that, they also had access to our user data. I don't know if they were able to get it (most likely not), but that message is there as a security precaution to be safe.

Mongrels, do I have to change my password to Worth as well?

its a weird world eh?

best of luck jax!!

This sux!
I hate it when people try to wreck peoples sites.(for what reason thay would do it , i dont know).
the worth community is a great place to be.
I hope thay find out who did it and press charges.

Luckily, I can still re-upload my newest entry... glad you guys caught it early! Thanks for keping us informed. :)

Cool.. it's back up..

/wanders back to fav. site

i still can't log in :( i haven't been able to log on all night :(

can someone help me?

whenever i try to log it says my username or password is wrong but its not.

It's seems to be back up. Is everything going to be all right? I checked out the contest I entered and my entry is up for vote except that it doesn't appear on my stats page. Is that just another bug because of this jerk's hack and in time it will be back to normal?
This really sucks. I hope all goes well.

Depends - we lost 24 hours of data. Are you sure it's in there?

I can check again but right after I was able to get back in I went to the contest & saw my entry. I then went to my stats and it wasn't there.

Thanks for your help Jax. I'll stay over at Worth so this doesn't get confusing. :)

I was able to get onto Worth this morning, but all of a sudden I got a pop-up window notifying me of a virus, and Worth started acting funny. I closed out IE and tried to get back on and I couldn't.


Bar stewards!!!


Best of luck to you Jax!

I just got a message that Worth was hacked again! This hacker is getting annoying and I'm sure I'm not the only one getting pissed off. This freak needs to get a life if he has nothing better to do.

I hope you guys catch him.

It was just hacked again! :(

What a small mindless petty prick!

Chin up Jax. (((hugz)))

Ummmmm....Jax? Could you, for the duration of this asshat's hacking, remove reference to Plime? We don't want to give him any new ideas.

It's back up!

LOLOLOLOLOLOL
Chinese??? AHahah xD

Again: LOL

Look........ LOL, they may be using 'feather proxies' LOL, i bet with you that those b*****ds are Americans!

Everyone change theyre passwords, ofcourse they have you passwords now! once in a table, every DB is yours............... nothing SQL cant do.

Btw, HACKED AGAIN? Dont you learn with the mistakes? SQL injection is easy to solve, just 'make safe' into all text areas and file uploading system.... be aware of that!

Again... LOL.

Edit: Give me their IP.....