leod : The best defense against hacking is hacking. Any level of hacking Vizzed is hacking that can be protected against. You did the right thing helping David out but I'd recommend keeping it a little more controlled in what you do and inform David asap of any vulnerability. Hacking is not a crime if you're doing it for the good of Vizzed. It's better that someone inform the admin than it is for someone to step in and wreck total havoc, even possibly something unrecoverable. The thing about hacking is you might never know if it'll work.

One time, another player in another community hacked the community and became admin for a day. It caused the true admin to backup the website then close it to fix the vulnerability. The same player also proceeded to hack the IRC client and it was a lot of fun trolling the entire community but it quickly motivated the admin to improve security. That guy hasn't been able to find as many exploits.

Fireproof : That's very true. You have to have the mind of a hacker or be friends with a hacker to fix these sort of exploits.

leod : I'm impressed that you were willing to admit to it. I didn't want to reveal who did it for your sake because I know some people aren't as forgiving as some of us.

Jordanv78 : You probably know by now but I've made it so that Globals can have more than 1 IP assigned to their account.

Barathemos : I'll be making a separate thread at some point with a list of all the disabled tags.

Sword legion : Vizzed has been hacked a few times before a few times but there was at least 1 or 2 other occasions where the hacker worked with me to fix the exploit. There have been hacks in the past that were very malicious, one was so bad on one of my old vizzed boards that it resulted into the entire user table of the database being dumped which basically resulted into me having to start all over again since all use data was lost.

I had actually just taken sleep medicine 30 minutes before mrfe let me know that the site was being hacked. I knew I only had less than 30 minutes left until the sleep medicine would have full affect on me so I did a quick investigation and disabled all user features until the morning. I was really worried because vizzed is my full time job and it provides the only income to my wife and kids so if something happens to vizzed, I'm basically unemployed.

Davideo7 : I was wondering with putting the site back to normal, I get logged out all the time. I will just be browsing the forums and suddenly be a guest. Why does this keep happening? And I also did clear my cookies.

Davideo7 : I skyped you the second EM told me the site was being hacked, lol. He noticed that play and I had edited posts using the same IP, and that it wasn't either of our IP's, so he quickly asked me if I knew what was going on. I didn't, of course, and the only logical conclusion was that someone else was using my account. I never share my passwords, so it wasn't anyone I knew (and play had been editing posts with the same IP), so we agreed that we should let you know asap. If not for the fact that EM noticed the post edits (and the IP change), the situation could have gone for even hours longer with no one noticing.

I'm just glad it wasn't 30 minutes later, lol.

leod : I'm actually impressed as well, it took a lot of courage to admit that. I won't pretend to be ok with what you did (I mean, hacking Vizzed is a big deal), but I'm very impressed with how you responded to realizing this became a huge deal (working with David to resolve the problem). I don't think hacking the site was a good thing in any way, but the fact that you owned up to it and helped David patch the exploit up is enough to convince me to forgive you.

Barathemos : It sounds like your IP is changing, or you're logging in from a different device (whether purposefully or not). You get logged out if your account is accessed from a different IP, or if your IP changes, so it sounds like something on your side of things.

EideticMemory : Kudos.

mrfe : So all users are now on a single IP account? Cause yeah,I am using different IP addresses at different times.

Barathemos : Not that we're limited to one IP, but more that IP changes will cause the site to log us out. It thinks we're switching devices, so that's why you're getting logged out.

Fireproof : so how did lead help out david? just courious

hellno163 : It's not obvious? Lead admitted to the security exploits and told David about them. If these security weaknesses were exploited by another, more malicious, user, there could have been more damage and work. I'm sure it would have been better to tell David upfront but we live and learn. No harm done.

Fireproof : ohh ok