On 9/6/06, Alan Dayley <alandd@consultpros.com> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alan Dayley wrote:
> The PLUG website is down.  It was hacked sometime early this morning.
> (Joomla! and or it's addons is proving to be quite insecure.)
>
> I don't have time to do much with it right now.  It'll have to wait till
> tonight.  Sorry about that.  Please be as patient as possible.

Site is back up, mostly.  There are a few things to restore, like the
banners.  But, it should be hardened (thanks JD) better than before and
has all the latest updates.

Thanks for all the suggestions and encouragement!

Alan

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFE/ocLDQw/VSQuFZYRAhXFAJ0XckSrwqQElmXTaDjoKLKs74cZcwCdGiV1
C2J4I31vRwUsgipUYFIGa+c=
=qmR8
-----END PGP SIGNATURE-----
---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change  you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss

> Edward Norton wrote:
>> Anytime you add a complex CMS like Joomla, etc, you have the
>> possibility
>> of security problems. The PLUG site really isn't all that expansive, >> so what IS the problem with using HTML?
>
> We left HTML to allow members to contribute to the site.  In the end, > we have not had very many contributions from the general
> membership, for whatever reason.

I may not be [completely] keeping up, here (sorry),
but I thought that ("allow members to contribute to the site")
was what a wiki was for;
(also, an archive of the mail lists, such as this one...)
just 0.02,  ...from:
--
Mike Schwartz    
Glendale  AZ
schwartz@acm.org
Mike.L.Schwartz@gmail.com