15-Feb-2009

Abuse signalled
Mid last week, I took a look to the web logs and I noticed an external source had abused the wiki sto store some data. This person, using an anonymiser to obsure his (her?) IP address, has created an account “Airtickets”, entered an E-mail address (required to get a password) and uploaded a number of files. Retrieved them as well, it seems.

The files didn’t do any harm – these were plain HTML as far as I could determine. Nor would it be able to run uploaded files directlry by the webserver – it’s not set up that way.
Of course, this is not the intention of the VMS wiki, so I tracked down as many information I could get, deleted the files and disabled the account.
Another thing I changed is that I’ll be noticed when a new account is being created.

I kept track of it a few days, and I saw attempts to retrieve the information the day after I removed the files. But all resulted in “404” status. Which is, of course, correct.
Now I deleted the account data, so accessing the account will now fail basically, after I deleted the cached files, as the documentation specifies.
And I notified the address on the issue.
Blog program
The basic idea of this program has developed and put to disk, so it’s more or less time start developing the program itself. There are a few things I have to look into. I intend to use this as an excercise to get into C (heavy, I know) and some VMS-specifics like accessing indexed files (the RMS way) which requires specific code. But there are sufficient examples available for any code block I would like to use. I guess I’ll start coding soon.
WordPress update
The latest version is now 2.7.1, perhaps I’ll update soon. Hoepfully it does work with the current HP-supplied PHP engine (I didn’y notice the definite version yet)

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.