Thanks N101CS and all who work on the site. Thanks Lena for getting back to me at MYO. I felt assured that RV was "on the case".

Yes. Thank you very much!

Now... Contingency plans anyone?

Bob

What if this is a malicious attack from some 12 steppers? Or somebody else...Dupont maybe or some pharmaceutical company (the Campral Cats)

As a former AA member, There were some evil AAers, 13th stepping etc.

Since we're not card (chip) carrying members, and don't buy into the cult, (I don't hate them), this would be like promoting satanism. Just my 52 cents. Jim

I second that we need contingency...

Could be, but it sounds like conspiratorial thinking. Of course some conspiracies are true, but this looks like some overseas mischief.

I am a former AA member myself. I know what you mean by the "evil" ones. The control-freaks, the predators, the empty headed drones with their unhelpful empty sayings... but I haven't seen any zealots that would wreck a website. I wouldn't be surprised if it were true though.
However, I have something they'll never ever have. I'm cured and they will always be fighting for sobriety day-to-day. We've tried to reach them, but are vehemently opposed and censored us.

Campral? Yes, I took that well over a year with absolutely no effect whatsoever. I don't think there's enough money in it for them to do something as malicious and illegal as hack a website.

So it's probably a random hacker or hacking group. There are tutorials on how to hack phpbb of various versions and new exploits are arising all the time.

Bob

PS I smashed my AA chip after dozens of failures. I should have returned the shards to my local AA group.

PPS I think most AA folks are honest hearted folks that have gotten caught up in the cult. Most of the rest are there by court order. It's that small controlling minority that creates the problems.

So everyone knows: The web site hack was an automated script by *someone* but was not an identifiable group or person. It was not directed at us specifically - it was a mass attack against PHP sites - and exploited a PHP vulnerability. I still have not identified the vulnerability because our hosting provider is in "damage control" mode - I suspect they won't say because it could open them to liability. In any case, it appears to be fixed.

Well done, N101CS. Great news.

V.