#update php version
Explore tagged Tumblr posts
Text
Find the step-by-step instructions on changing the PHP version in cPanel to maintain compatibility with your website. Explore now!
#how to change php version in cpanel#change php version cpanel#cpanel php version#how to update php in cpanel#change php version in cpanel
0 notes
Text
Hello! Welcome to the official Double Dead Studio Tumblr, the solodev behind Reanimated Heart, Another Rose in His Garden, and Pygmalion's Folly.
Reanimated Heart is a character-driven horror romance visual novel about finding love in a mysterious small town. There are three monstrous love interests with their own unique personalities and storylines.
Another Rose in His Garden is an 18+ erotic Omegaverse BL visual novel. Abel Valencia is an Omega who's hidden his secondary sex his entire life. Life's alright, until he meets the wealthy tycoon, Mars Rosales, and the two get embroiled in a sexual affair that changes his life forever.
Pygmalion's Folly is a survival murdersim where you play as Roxham Police Department's star detective, hellbent on finding your sister's killer... until he finds you.
Content Warning: All my games are 18+! They contains dark subject matter such as violence and sexual content. Player discretion is advised.
This blog is ran by Jack, the creator.
Itch | Link Tree | Patreon | Twitter
Guidelines
My policy for fanwork is that anything goes in fiction, but respect my authority and copyright outside it. This means normal fan activity like taking screencaps, posting playthroughs, and making fanart/fanfiction is completely allowed, but selling this game or its assets isn't allowed (selling fanwork of it is fine, though). You are also not allowed to feed any of my assets to AI bots, period, even if it's free.
Do not use my stuff for illegal or hateful content.
Also, I expect everyone to respect the Content Warnings on the page. I'm old and do not tolerate fandom wank.
For more details about how I view Fanwork, refer to this post.
F.A.Q.
Who are the main Love Interests in Reanimated Heart?
Read their character profiles here!!
Who's the team?
Jack (creator, writer, artist), mostly. I closely work with Exodus (main programmer) and Claira (music composer). My husband edits the drafts.
For Reanimated Heart, my friend Bonny makes art assets. I've also gotten help from outsiders like Sleepy (prologue music + vfx) and my friend Gumjamin (main menu heart animation).
For Reanimated Heart's VOs, Alex Ross voices Crux, Devin McLaughlin voices Vincenzo, Christian Cruz voices Black, Maganda Marie voices Grete, and Zoe D. Lee voices Missy.
Basically, it's mostly just me & outsourcing stuff to my friends and professionals.
How can I support Double Dead Studio productions?
You can pay for the game, or join our monthly Patreon! If you don't have any money, just giving it a nice rating and recommending it to a friend is already good enough. :)
Where do the funds go to?
Almost 100% gets poured back into the game. More voice acting, more music, more trailers, more art, etc. I also like to give my programmer a monthly tip for helping me.
This game is really my insane passion project, and I want to make it better with community support.
I live in the Philippines and the purchasing power of php is not high, especially since many of the people I outsource to prefer USD. (One time I spent P10k of my own money in one month just to get things.) I'll probably still do that, even if no money comes in, until I'm in danger of getting kicked out the street… but maybe even then? (jk)
What platforms will Reanimated Heart be released in?
Itch and then Steam when it's fully finished. Still looking into other options, as I hear both are getting bad.
Will Reanimated Heart be free?
Chapter 1 will be free. The rest will be updated on Patreon exclusively until full release.
Are you doing a mobile version?
Yeah. Just Android for now, but it's in the works.
Where can I listen to Reanimated Heart's OST?
It is currently up on YouTube, Spotify, and Bandcamp!
Why didn't you answer my ask?
A number of things! Two big ones that keep coming up are Spoilers (as in, you asked something that will be put in an update) or it's already been asked. If you're really dying to know, check the character tags or the meta commentary. You might find what you're looking for there. :)
Will there be a sequel to Pygmalion's Folly?
It's not my first concern right now, but I am planning on it.
Tag List for Navigation
Just click the tags to get to where you wanna go!
#reanimated heart#updates#asks#official art#crux hertz#black lumaban#vincenzo maria fontana#grete braun#townies#fanwork#additional content#aesthetic#spoilers#lore#meta commentary#memes#horror visual novel#romance visual novel#yandere OC#prompts#another rose in his garden#abel valencia#mars rosales#florentin blanchett#pygmalion's folly
149 notes
·
View notes
Text
I've finally fixed trainsingames.com, so you can now actually read the things I wrote there, see the screenshots and so on. Just to be clear, this isn't my best work, it's all from 2013 or earlier, I'd definitely do and say things differently now, but hey, I still made it, and I don't want to see it gone.
The site is basically archived. I have no plans to write anything more for it at the moment. Never say never, of course, but given how few games I played over the past years, I don't really see it happening, sorry.
(I also have no plans to open it up to others, sorry, because that's something I'd need to manage, I'd probably need to install a proper CRM and so on, and I just don't have the time or energy for that among all my other hobbies.)
On the website front, I may do some changes, just to make it look nicer, but there's no set time frame for that. I also want to change it to a system where the site is just static HTML that gets regenerated from PHP when I update it (or something like that) to avoid any issues like this one in the future. For the record, the problem was that the Markdown parser I had from ~2007 didn't work with modern PHP versions, so I finally updated it.
And yes, I made trainsingames.com long before this blog, that's where I got the idea for this URL from.
8 notes
·
View notes
Text
I currently have my latest blogpost for my website displayed on my front page. If you click on the title, it will take you to the post. I essentially grab the Title, which is a class of h1, and the article, using javascript, and then replace it. However, right now, this is done by manually replacing the href of the javascript. This works; I just create a post, copy the link, and paste it into the script in my home page.
Problem; I am already maintaining my rss feed manually. Why should I do *this* manually? I kind of want to not do either manually.
Solution: Javascript can be used to parse a xml doc. This includes rss feeds. I can simply make a script that, when you load up the webpage, it will request the most recent version of the .xml file associated with my file, then find the one with the most recent pubDate, it will then grab the link from that, and use my existing script to display it on my homepage.
As for updating my rss feed? I may need to create a php script for that. I just need two forms, and a submit button. One will take a link, and the other would be the password. So, I create a new blogpost, upload it, and then copy the link into the form. The password field will be used to create a cryptographic hash, and if it matches the provided one, then it will create a timestamp, and add the item, complete with links, to the html file. I could add in a hidden description to the blogpost, and the script can rip the description from there. Its pretty simple, and I wouldn't trust this authentication process... except that it is extremely limited in scope. All it does is accept a link already part of my blog, and updates an xml document - one I regularly back-up.
I also want to make a script that would get the previous and next posts on the blog, based on the info already in the xml document, rather than manually updating the existing blogposts. It doesn't take long, but it would be one less thing I have to worry about. I just have to match the current link to one in the xml file, get the timestamp, and find the item with the previous and next timestamp, then inject the links into the previous/next buttons. I can use a span element that will be updated to show up once a new document is found by the script.
If I was making one that actually allowed you to write a blogpost - complete with html - then I would want better security - like some form of 2 factor authentication. My authentication script would work. I would also want it limited to posting based on the time (like 1 post per x minutes). I may actually do that later. It would be nice to just go to my site, use my passkey+password authenticator, and then just post to my blog. It would have a form for the title, short description, and the main post. Then, it takes that info, and essentially pastes it into a provided template.
I could also make a similar system for the site-updates and little blurb on the top. Currently, I just edit the html for that. But I could also make an xml document, and just have the posts contained in items like an rss feed, then have the javascript read from there. Use a php script to add new entries to it. They could even be in the same file, just have to use two different elements.
Finally, on the main page, you can click on the title of the blog post to link there. This is done via script, so there is no mouseover indication that you can do this. I want to make the title element change a bit when you mouseover it - perhaps make it a little paler on mouseover?
9 notes
·
View notes
Text
widowbase v3 and v4
Whooboi, there is a lot of discourse going on right now about JCINK coders. Perfect time for me to update some base skins!
For those who just want to streamline their coding process, I have updated my widowbase v3 to include a day/night theme toggle and made a few responsive tweaks to the vertical nav and sidebar. For those looking to learn how to use CSS grid and flexbox to create responsive forum designs, I added a new base, widowbase v4. This version includes some HTML templates that have a very ugly, extremely basic, but functional fluid grid layout. These templates also incorporate hidden divs (read as, display: none) that include the PHP variables frequently used inside those respective HTML templates, so you can easily delete everything I've done and start from scratch with your own. Then just delete the hidden div when you've used everything you need. Easy peasy!
For those of you just beginning your coding journey, I wish you the best of luck! It is such a fun and rewarding hobby. You are also free to rip apart any of the codes on my preview site and cobble them back together. These experiments can be a great learning tool! You are more than welcome to use any of my free resources as a base, as long as the finished product remains free. As for my actual skin bases (or template sets specifically labeled as bases), these can be used for free or paid skins. Make money or give it away, whatever works for you, just leave the credits given to resources intact so others can find out how to accomplish the same thing!
41 notes
·
View notes
Text
OpenSUSE Linux 15.6 is here, packed with exciting updates to the kernel, Docker, PHP, Perl, Python, Apache/Nginx, MariaDB/PostgreSQL, and more!
Ready to upgrade from 15.5? Learn how with our easy-to-follow guides for both GUI and CLI methods.
7 notes
·
View notes
Text
PHP Update to 8.1, Site Down
Hi, everyone!
If you tried visiting any of the devlogs, you may have noticed that the site is down currently. This is due to some expected changes!
My hosting provider recently gave me the notification that I needed to update the website from PHP 7.4 to 8.1+, or I would be charged additional each month for older version support. So, to avoid this unneeded charge, I updated the PHP version, hoping there wouldn't be too many compatibility issues.
Unfortunately, that obviously wasn't the case, haha! The entire site is broken. Nothing has been too challenging to fix - it's only been some particular PHP functions that are no longer available (which I used heavily...).
However, this has been time-consuming to go through, fix, and test. I have to go through every page and update almost every single database query - over 40 pages - which is almost 9,000 lines of code to go through at the moment.
Just know that I am working on this presently, and the site should be good as new soon enough! I've already fixed 11 pages that were essential to being able to navigate other parts of the site (login page, page header, utility scripts, etc.). I will try to fix the forums before other non-essential pages, so you all can view the devlogs without issue (and I can post an update there, as well)!
Please avoid the site for the time being, you may see some crazy PHP errors, haha. I'll make an update as soon as the forums are back up, and then another when the entire site is restored. As always, thank you for your patience, it is deeply appreciated!
3 notes
·
View notes
Text


Giving Tuesday – Sponsoring on GitHub… Debian, Ubuntu, PHP packaging … #GivingTuesday 💻📦
If you're on GitHub and see that your favorite open-source code, tools, or packages have a sponsorship for the developer, please consider doing it today.
We (Adafruit) sponsored oerdnj on GitHub, and we get a massive benefit from Ondřej Surý, who maintains Debian and Ubuntu packages that allow installing multiple versions of PHP. This includes backporting security updates to PHP7.4 and PHP8.0, which are no longer officially supported by the PHP.net folks.
OR! Check out Ondřej Surý's Patreon -
==
Join a worldwide celebration of generosity – GivingTuesday is an opportunity for people worldwide to come together through generosity in all its forms by sharing acts of kindness and giving their voice, time, money, goods, and advocacy to support communities and causes. More about Giving Tuesday on their site – https://www.givingtuesday.org/
The posts on Adafruit and its social media are resources, groups, causes, organizations, and more from the Adafruit team and community.
Since we’re in the techy and maker circles, we’ll spotlight many charities and open-source efforts.
The posts are not sponsored in any way. Adafruit provides paid time off for charity for all team members all year. We also want to thank the Adafruit team for the biggest gift one can give: their time. Many posts are about the charities, groups, and organizations in which the Adafruit team participates.
This year, we are getting the word out about ones we have not covered before, so don’t worry if you don’t see a previous one here!
Check the past and present posts on Adafruit with the #GivingTuesday tag.
#GivingTuesday#opensource#developercommunity#githubsponsors#phpdevelopment#debianteam#ubuntupackages#securityupdates#php74#php80#opensourceprojects#codinglife#techcommunity#givingback#digitaltools#thankyoudevelopers#supportopensource#opensourcecontribution#opensourcefunding#techteamwork#givingtuesday2024
5 notes
·
View notes
Text
Find out the steps to check reboot and shutdown logs on the Windows server with the help of an event viewer to ensure system stability and troubleshooting.
#how to change php version in cpanel#change php version cpanel#cpanel php version#how to update php in cpanel#change php version in cpanel
0 notes
Text
Mastering Web Development: A Comprehensive Guide for Beginners
In the vast landscape of technology, web development stands as a crucial cornerstone. It encompasses the art and science of building websites, ranging from simple static pages to complex web applications. Whether you're aiming to pursue a career in software development or seeking to enhance your digital presence, understanding web development is essential.
In this comprehensive guide, we'll take you through the fundamental concepts and practical skills needed to master web development from scratch. Let's dive in!
1. Understanding HTML (Hypertext Markup Language)
HTML serves as the backbone of every web page, providing the structure and content. It uses tags to define different elements such as headings, paragraphs, images, and links. By mastering HTML, you'll be able to create well-structured and semantically meaningful web documents.
2. Exploring CSS (Cascading Style Sheets)
CSS is the language used to style HTML elements, enhancing their appearance and layout. With CSS, you can customize colors, fonts, spacing, and more, giving your website a polished and professional look. Understanding CSS selectors and properties is essential for effective styling.
3. Introduction to JavaScript
JavaScript is a versatile programming language that adds interactivity and dynamic behavior to web pages. From simple animations to complex web applications, JavaScript powers a wide range of functionalities. Learning JavaScript fundamentals such as variables, functions, and events is crucial for web development.
4. Building Responsive Websites
In today's mobile-centric world, it's essential to create websites that adapt seamlessly to various screen sizes and devices. Responsive web design achieves this by using fluid grids, flexible images, and media queries. Mastering responsive design principles ensures that your websites look great on desktops, tablets, and smartphones.
5. Introduction to Version Control with Git
Git is a powerful tool for tracking changes in your codebase and collaborating with other developers. By learning Git basics such as branching, merging, and committing, you can streamline your development workflow and effectively manage project versions.
6. Introduction to Front-End Frameworks
Front-end frameworks like Bootstrap, Foundation, and Materialise provide pre-designed components and stylesheets to expedite web development. By leveraging these frameworks, you can create responsive and visually appealing websites with less effort and code.
7. Introduction to Back-End Development
While front-end development focuses on the user interface, back-end development deals with server-side logic and database management. Learning back-end languages such as Node.js, Python, or PHP enables you to build dynamic web applications and handle user interactions efficiently.
8. Deploying Your Website
Once you've developed your website, it's time to make it accessible to the world. Deploying a website involves selecting a web hosting provider, uploading your files, and configuring domain settings. Understanding the deployment process ensures that your website goes live smoothly.
9. Conclusion and Next Steps
Congratulations on completing this comprehensive guide to mastering web development! By now, you've gained a solid understanding of HTML, CSS, JavaScript, version control, frameworks, and deployment. As you continue your journey in web development, remember to stay curious, practice regularly, and explore advanced topics to further refine your skills.
Resources for Further Learning:
Online tutorials and documentation
Interactive coding platforms
Community forums and discussion groups
Next Steps:
Explore advanced topics such as web performance optimization, server-side rendering, and progressive web apps.
Build real-world projects to apply your skills and showcase your portfolio.
Stay updated with the latest trends and technologies in web development through blogs, podcasts, and conferences.
With dedication and perseverance, you'll continue to evolve as a proficient web developer, creating innovative solutions and contributing to the ever-changing digital landscape . Happy coding!
4 notes
·
View notes
Text
Exploring Essential Laravel Development Tools for Building Powerful Web Applications
Laravel has emerged as one of the most popular PHP frameworks, providing builders a sturdy and green platform for building net packages. Central to the fulfillment of Laravel tasks are the development tools that streamline the improvement process, decorate productiveness, and make certain code quality. In this article, we will delve into the best Laravel development tools that each developer should be acquainted with.
1 Composer: Composer is a dependency manager for PHP that allows you to declare the libraries your project relies upon on and manages them for you. Laravel itself relies closely on Composer for package deal management, making it an essential device for Laravel builders. With Composer, you may without problems upload, eliminate, or update applications, making sure that your Laravel project stays up-to-date with the present day dependencies.
2 Artisan: Artisan is the command-line interface blanketed with Laravel, presenting various helpful instructions for scaffolding, handling migrations, producing controllers, models, and plenty extra. Laravel builders leverage Artisan to automate repetitive tasks and streamline improvement workflows, thereby growing efficiency and productiveness.
3 Laravel Debugbar: Debugging is an crucial component of software program development, and Laravel Debugbar simplifies the debugging procedure by using supplying exact insights into the application's overall performance, queries, views, and greater. It's a accessible device for identifying and resolving problems all through improvement, making sure the clean functioning of your Laravel application.
4 Laravel Telescope: Similar to Laravel Debugbar, Laravel Telescope is a debugging assistant for Laravel programs, presenting actual-time insights into requests, exceptions, database queries, and greater. With its intuitive dashboard, developers can monitor the software's behavior, pick out performance bottlenecks, and optimize hence.
5 Laravel Mix: Laravel Mix offers a fluent API for outlining webpack build steps on your Laravel application. It simplifies asset compilation and preprocessing duties together with compiling SASS or LESS documents, concatenating and minifying JavaScript documents, and dealing with versioning. Laravel Mix significantly streamlines the frontend improvement procedure, permitting builders to attention on building notable consumer reviews.
6 Laravel Horizon: Laravel Horizon is a dashboard and configuration system for Laravel's Redis queue, imparting insights into process throughput, runtime metrics, and more. It enables builders to monitor and control queued jobs efficiently, ensuring most beneficial performance and scalability for Laravel programs that leverage history processing.
7 Laravel Envoyer: Laravel Envoyer is a deployment tool designed specifically for Laravel packages, facilitating seamless deployment workflows with 0 downtime. It automates the deployment process, from pushing code adjustments to more than one servers to executing deployment scripts, thereby minimizing the chance of errors and ensuring smooth deployments.
8 Laravel Dusk: Laravel Dusk is an cease-to-give up browser testing tool for Laravel applications, built on pinnacle of the ChromeDriver and WebDriverIO. It lets in builders to put in writing expressive and dependable browser assessments, making sure that critical user interactions and workflows function as expected across exceptional browsers and environments.
9 Laravel Valet: Laravel Valet gives a light-weight improvement surroundings for Laravel applications on macOS, offering seamless integration with equipment like MySQL, NGINX, and PHP. It simplifies the setup process, permitting developers to consciousness on writing code instead of configuring their development environment.
In end, mastering the vital Laravel development tools noted above is important for building robust, green, and scalable internet packages with Laravel. Whether it's handling dependencies, debugging troubles, optimizing overall performance, or streamlining deployment workflows, those equipment empower Laravel developers to supply outstanding answers that meet the demands of current internet development. Embracing these gear will certainly increase your Laravel improvement enjoy and accelerate your journey toward turning into a talented Laravel developer.
3 notes
·
View notes
Text
Pop-up Dialogue Fixed
On the NofNA website, Solar System and Lycosa's pop-up speech windows were faulty for any dialogue that had an apostrophe in them, due to my webhost updating PHP to version whatever.0, and the function that converted apostrophes to html-output that didn't break the pop-up windows was no longer converting the text properly.
I have no idea how long it's been broken, as I just discovered this today, but, it's fixed now.
6 notes
·
View notes
Text
TOP 3 Web Development Course in Chandigarh
Looking for excellence in web development training? Our web development course in Chandigarh offers top-notch instruction in HTML, CSS, JavaScript, and more. With a focus on practical projects and personalized mentorship, we ensure you gain the skills needed to excel in the field. Enroll now for the best web development course in Chandigarh at Excellence Technology
Welcome to Excellence Technology's Web Development Course!
Are you ready to unlock your potential in the world of web development? Look no further than Excellence Technology's comprehensive web development course. Whether you're a beginner or an experienced programmer looking to enhance your skills, our course is designed to cater to all levels of expertise.
Our web development course is carefully crafted to provide you with the knowledge and practical skills needed to excel in this rapidly evolving field. Led by industry experts, our instructors bring a wealth of experience and up-to-date insights to guide you through the intricacies of web development.
Here's what you can expect from our course:
Fundamentals of Web Development: Gain a solid foundation in HTML, CSS, and JavaScript, the building blocks of the web. Understand how these technologies work together to create visually appealing and interactive websites.
Front-End Development: Dive into the world of front-end development, where you'll learn how to create engaging user interfaces and responsive designs. Master popular frameworks like React and Angular to build dynamic web applications.
Back-End Development: Explore the back-end technologies that power websites and web applications. Learn server-side programming languages such as Python, PHP, or Node.js, and work with databases like MySQL or MongoDB to handle data storage and retrieval.
Full-Stack Development: Get a holistic understanding of web development by combining front-end and back-end skills. Become proficient in both client-side and server-side programming, enabling you to build end-to-end web solutions.
Project-Based Learning: Apply your newfound knowledge through hands-on projects. From building a personal portfolio website to creating a fully functional e-commerce platform, our course projects will challenge you to think creatively and solve real-world problems.
Industry Best Practices: Stay updated with the latest industry standards and practices. Learn about version control, testing, deployment, and optimization techniques to ensure your websites are secure, efficient, and scalable.
Career Support: Our commitment to your success extends beyond the classroom. Benefit from our career support services, including resume building, interview preparation, and job placement assistance. We'll help you showcase your skills and connect with potential employers in the web development industry.
Now I tell you about TOP 3 Institution for Web Development course
•https://www.excellencetechnology.in/
•https://extechdigital.in/
•https://thebrightnext.com/
At Excellence Technology, we believe in providing a nurturing and inclusive learning environment. Join our web development course and become part of a vibrant community of learners, where you can collaborate, network, and grow together.
Don't miss this opportunity to embark on an exciting journey into the world of web development. Enroll in Excellence Technology's Web Development Course today and unlock your potential in this ever-expanding field.

Connect with us
If you do not like to fill up the form above, contact us at the following details, we will be happy to connect.
Email: [email protected]
Phone: +91 9317788822, 93562-55522
#webdesign#webdevelopment#webdesigner#userexperience#responsive web design#webdesigninspiration#web design agency#websitedesign#web design services#graphic design#webdesigncommunity#uxdesign#frontenddevelopment#Webdesignlife#web design company#creativewebdesign
7 notes
·
View notes
Quote
1.概要nginx の ngx_http_parse_request_line() 関数には、空白文字を適切に処理しない問題が存在します。悪意のあるリモートの第三者に利用された場合、アクセス制限を回避し、本来アクセスできないコンテンツに不正アクセスされる可能性があります。この脆弱性は、昨年の 2013 年 11 月下旬に nginx 社によって修正された少し古い問題となりますが、脆弱性を悪用された場合の影響度が高いため、影響を受けるバージョンの nginx を利用するユーザは可能な限り以下に記載する対策を実施することを推奨します。2.深刻度(CVSS)7.5http://nvd.nist.gov/cvss.cfm?version=2&name=CVE-2013-4547&vector=%28AV:N/AC:L/AU:N/C:P/I:P/A:P%293.影響を受けるソフトウェアnginx 0.8.41 - 1.4.3nginx 1.5.0 - 1.5.6※1 影響を受けるバージョンの nginx パッケージが含まれる openSUSE やDebian などの Linux ディストリビューションにおいても、この脆弱性の影響を受けます。4.解説Web サーバソフトウェアである nginx の ngx_http_parse.c には、HTTP リクエストラインを扱う ngx_http_parse_request_line() 関数が実装されています。nginx には、ngx_http_parse_request_line() 関数における、HTTP リクエストに含まれた空白文字の取り扱いに不備があります。このため、ディレクトリ名またファイル名の末尾に空白文字が含まれた不正なリクエストを処理した場合に、コンテンツに対してアクセス制限を適切に適用しない問題が存在します。この脆弱性を利用することで、リモートの攻撃者は nginx における特定コンテンツへのアクセス制限を回避し、保護されたコンテンツに不正にアクセスすることが可能となります。なお、この脆弱性を悪用するためには、ファイルアップロード機能などを利用して、標的 nginx に空白文字を含むディレクトリまたはファイルをアップロードする必要があります。また、Windows の nginx で PHP を利用する環境で、この脆弱性を悪用された場合、任意の PHP コードが実行される可能性があることが示唆※2 されています。※2 http://sec.baidu.com/index.php?research/detail/id/195.対策以下の Web サイトを参考に nginx 1.4.4/1.5.7 以降を入手しアップデートすることで、この脆弱性を解消することが可能です。nginx: downloadhttp://nginx.org/en/download.htmlあるいは、下記の修正パッチを入手し適用することでも、脆弱性を解消することが可能です。nginx security advisories: The patchhttp://nginx.org/download/patch.2013.space.txtまた、Linux ディストリビューションにおいては、それぞれのベンダが提供するセキュリティアドバイザリを参考に、適切なパッケージを入手しアップデートすることで、この脆弱性を解消することが可能です。DebianDSA-2802-1https://www.debian.org/security/2013/dsa-2802.ja.htmlopenSUSEopenSUSE-SU-2013:1745-1http://lists.opensuse.org/opensuse-updates/2013-11/msg00084.html6.ソースコード(Web非公開)(執筆:株式会社ラック サイバー・グリッド研究所)※Web非公開該当コンテンツ閲覧をご希望の方はScan Tech Reportにご登録(有料)下さい。Scan Tech Reporthttp://scan.netsecurity.ne.jp/archives/51916302.html
nginx の ngx_http_parse_request_line() 関数の実装に起因するアクセス制限回避の脆弱性(Scan Tech Report) | ScanNetSecurity
2 notes
·
View notes
Text
Update your fucking servers or give me free antiacid for the trouble of installing an old-ass PHP in a last-version Ubuntu server
2 notes
·
View notes
Text
I want to make an addendum to further clarify some stuff since i keep seeing the same questions and misinformation posted:
What about the accounts? There are no accounts on 4chan. The closest thing to that are the e-mail based verification system and the 4chan pass, both of which ill explain after the read more to keep compactness.
What about the feds? There were no feds. I am as heartbroken by this reveal as you are, but 4chan moderation had no feds amongst them. Can't say the site wasn't being surveilled to some degree, but that's just standard at this point.
What else did the hacker do? Nothing. The servers were taken down by 4chan team to prevent further tampering. A supossedly leaked mail from one of the main mods said that they were working on the website and all of the moderation members passwords to access the backend were being changed.
About the exploit? After some reading and a helpful reblog on the first post, the exploit used was reverse shell powerscript, which has been present since php 5.5, and since about 2013. Take in consideration that the current php version is 8.7
Anything else? Some stuff. Apparently there was some sharty spam on here after the first day, but i think they've already got bored? Also i forgot to mention /qa/ got axed from 4chan originally because one day they decided to raid /lgbt/, ironic. /ghost/ is still going strong, although people started to flock little by little, so activity died down ever so slightly.
Now, i'll get some inane babble out of my system bellow, and will add some responses i got from anons to provide further commentary. Keep in mind this will be updated every now and then. Also I'm still open to replies if you want to tell me something about your experience as an anon.
About the verification system - The verification system was implemented sometime last year yo prevent spamming or ban evading, it boils down to a captcha that makes you wait 15 minutes before posting to verify your session, either that or provide a mail to which a verification link would be send, and you're free to post from there. 4chan pass is similar in the sense that you have to associate an email address, but neither of these were compromised. Mails used to verify are hashed, payment methods are processed through a third party, and neither of them were leaked by the hacker, since it wasn't in their interest to compromise users.
As for the images. I'll keep any names out to preserve anonimity, which seems fitting regardless.
To help understand:
/a/ - Anime & Manga
/k/ - Weapons
/tg/ - Tabletop games
/mlp/ - take a wild guess
/qst/ - Quests
/s4s/ - Shit 4chan Says (I have no fucking clue what "Jack Rusell" threads are)
/vt/ - Vtubers
/ck/ - Cooking
/vg/ - Videogame Generals /u/ - Yuri
Can't vouch on /vt/ being shit, since I lurked mostly /co/ and /vg/, but I believe it regardless. I'm posting this because I want to insist on what I said before: the bigger communities migrated to other chans, there we're already 4channers in here, a portion stayed on /ghost/, smaller sites are struggling to keep up with the bigger influx of people. I predict things will stay like this until we have actual news on 4chan status.
On a personal note, the funniest thing that has been unearthed from /j/ is how much janitors seemed to loathe the dragon ball threads.
There are A LOT of posts like these, but this is one of the reuploads that made me laugh the most. Bejitabros stay winning.
Can't think of anything else worth adding, if something of value comes up, it will be added bellow this point.
Also I know i wrote below instead of bellow on my first post. Bite me.
Post script notes:
I want to rectify the thing about /ghost/ going strong. Theres some guy accusing everyone of being some dude he has a vendetta against since 2013, and has turned the entire thread into a troll fest with his mere pressence.
2 million Israeli posters - You may have seen an image going around that claims that Israelis were leaked to be the number 1 posters on /pol/. While the image is real, it's extremely old, and it was common practice on /pol/ to put the Israel flag just to shitpost.
As for more Anon commentary:
People that say that "nothing of value was lost" really don't know jack shit about internet culture. 4chan (specifically /x/) was the origin place of SCP, the Backrooms and creepypastas as a whole, and the videogame boards made katawa shoujo, among other things. Acting like it was only a honeypot for schizos and extremist ideologies is being reductionist as fuck. Most people that post there just want to discuss their hobbies and stay in a format more comfortable than most social media, without an algorithm forcefeeding you literal trash designed to destroy your attention span just to get you to watch more ads. Pretending Anons are irredeemable monsters just because they posted on a mongolian basket weaving forum about what cartoon they watched, what game they played, or what clearly inedible food they ate, is detrimental to the already decaying evniroment of the internet. Don't celebrate when other people's spaces get shut down.
Also, a tool to track activity on altchans was made, so I guess this facilitates my predictions about where the traffic is going - https://eylenburg.github.io/altchans.htm
As of 24/04 (no im not putting the month before the day) an ETA was given that the site would be up as read only on late sunday or early monday. Edit: nevermind its back up lol
If you followed me because you expect more posts like this, abandon all hope. I post mainly about homestuck, lmao.
All right, I know no one gives a shit, but let me give you a recounting of the fall of 4chan from the perspective of someone who was there and has been lurking both 4chan and tumblr for a few years now.
I'll try to provide as much context as I can, but a lot of images were either lost or im too lazy to look for them in the +5000 reply thread in soyjak party.
Anyways, info below:
So, necessary context: a few years back, 4chan had a board called /qa/, which if you know little about the page, you may think every board is like /b/ or /pol/, which means a containment cess pool of grifters, (you) baiters, incels, and other deranged individuals. The thing is, /qa/ was somehow worse. The entire board was plagued and infested with soyjack edits, board culture was a nuclear disaster, anons were incredibly hostile in there, you know the drill, the big bad 4chan, but this time its actually true.
One day, moderation deleted /qa/, anons that posted there got mad, tried to raid other boards, failed, and then moved on to an altchan called soyjack party, which entire purpose you can guess from its name alone.
Apparently, the boards that allow pdf uploads (paper and origami, for example) didn't check if the uploaded file was actually a pdf file, so postscript files could be used to get access. This is as far as my understanding of web backend goes, sorry.
The hacker claims to have been working on this since 2021, and that he had access since about a year ago, but was recopilating data.
Now, what actually happened when the hack ocurred? Well, a banner of miku dancing with a song that played automatically was placed on top of every board, with the text "/QA/ IS BACK", this was possible because apparently no board was ever deleted, they were just hidden from the public.
A thread was then made on soyjack party, claiming authorship over the hack, and shit went south from there. Anons went en masse to talk there, a lot of weird discussion happened, the thread got the bump limit removed and got pinned, more than 5k posts were amassed on the first night alone. Keep in mind this happened at about 8 pm and most of the stuff went on through midnight.
So, the hacker leaked some things, first of all, the html files for the entirety of /j/ and the email address for every moderation member (important note: the pressence of .gov mails was disproven by the hacker themselves, so i guess there were never any feds), what is /j/? the board exclusive for jannies and moderators to discuss actions taken on the website regarding spam, ban evaders, threads spiraling out of control, etc. Among other things, some of the inner workings of 4chan got revealed, such as the web extension for jannies that allows them to do their job easily, how reports are handled, and other stuff. (Anecdotically, some guy got permabanned for calling anons jews or n-words over a 100 times in the same few threads)
Then, the source code got leaked. Important to say, the hacker removed the part of the source code related to the captcha, as to not facilitate bot attacks on the future, and all information related to email verification or 4chan pass users information also got removed, so all in all users are safe.
What was found on the sourcecode? That it was old, mostly. Most boards used code that hasn't been updated since about 2016, and /flash/ used the exact same code from when it was created back on 2011.
From there, desuarchive, a site that archives threads that die from bump limit, opened a dragon ball general on ghost mode, and thus began what later got called /ghost/, a solely text based thread with well over 20k replies as of right now, where a fraction of the 4chan population took refuge and is currently discussing random things with no particular topic. Kinda hard to read, but its comfy.
What does this mean for other sites? Not a lot, really. A lot of anons already crossposted in 4chan and tumblr already, and the ones that din't most likely wont come here. Some of the bigger/most dedicated groups, like /vt/, migrated to other boards. Various altchans are trying/tried to catch some of the flock of users that got lost, but i doubt it will get anywhere, since soyjak party for example was struggling with just the influx of users that came for the hack thread given its poor infrastructure. Kiwifarms saw a surge of new accounts apparently, but a lot of anons kinda loathe the idea of having to register, so theres that.
Smaller communities, such as generals that didn't get a lot of traffic, or boards on the slower end (say, /ic/, /lit/, etc) will probably vanish or disseminate until (or if) 4chan comes back up. I'd say give it a month, don't get your hopes up whether you want it to stay dead or want it to come back.
Given how many anons are staying on places like /ghost/ or other similar archives with the same ghost posting feature, i doubt it will be as bad as people are making it sound. Besides, the communities that are most likely to migrate to places like tumblr are either /co/, /vg/ or /lgbt/ refugees, which aren't THAT bad. Not every board was like the main cesspools (/b/, /r9k/, /pol/). From now on, either 4chan comes back up in a few weeks (somewhere between 2 weeks to a month is expected), altchans capture the migrating anons, or a brand new imageboard rises from the ashes to become the new go-to site for old 4chan posters.
In conclusion, nothing ever happens, but also don't worry, chances are this won't affect tumblr in the slightest. If it does, you can cash in your "you were wrong" ticket whenever you want, i'll take the L. As a footnote, keep in mind: NO users were compromised, if you ever posted there and are worried for your safety, physical or digital, you are safe. Edit: Forgot to add, if you are a 4chan refugee, im BEGGING you to dm me and tell what board you were from and where are you migrating, if at all.
487 notes
·
View notes