XJ恢复后的公告

fantasist

Website back online
XJ回来了


Hey there,
大家好，

as you might have noticed we had a security breach on our website yesterday. We're still evaluating how it could happen and how it did happen exactly, but for now the website is back online with a backup from yesterday afternoon - and we are hoping that it won't happen again.
你们大概都发现，昨天网站被攻击了。我们正在检查漏洞，但现在先用昨天下午的备份让网站运行起来，另外我们希望别被再次攻击。

To be bluntly honest, it's not a quiet big achievment to attack a website that is using a fairly old version of an open source CMS, we know it's vulnerable but we don't have the capacities to change that situation right now. For the sake of keeping this great community alive, please don't try to hack us as a proof of concept, we know it might be possible for a skilled hacker (or with the right exploit), just contact us and we'll try our best to fix the vulnerabilites.
说实话，攻击一个使用旧版本开源内容管理系统的网站并不是一个很大的成就。我们知道它很脆弱，但我们没办法立即作出改变。为了让这么美好的社区存活，请不要为了证明自己的实力而攻击我们。希望一些有技术的或者知道一些关键漏洞的黑客能联系我们，我们会尽力修复漏洞。

Furthermore I want to announce that we're looking for a new website coder/programmer, because as you might have noticed m0ver is quite busy lately and doesn't have much more time left to spend for XJ. The new design isn't making much progress (should be released for everyone by now) and we'd simply need a full-time coder (or as close as it gets to that) to take care of the whole website (updating e107 on a regular base, implementing the new design, fixing and finishing various other scripts). If you want and  think you could help us, and fit to the following  profile, please message me on a platform of your choice (PM, IRC, Steam):
另外我要宣布我们正在招募新的网站程序员，因为m0ver最近很忙，能用在XJ上的时间很少。新的网站设计没有完成多少（本来计划现在就应该发布给所有人看的），我们需要一个全职的程序员（或者能付出相对充足的时间），来管理整个网站（升级e107，实现新设计，修改或编写各种脚本）。如果你希望帮助我们，而且有以下的技术，请联系我。

You have....
- experience in handling PHP/SQL and programming various dynamic scripts
- knowledge about the e107 CMS
- worked on bigger websites before
- some spare time left to spend for XJ and are active,flexible and would like to work in the XJ admin team

I'm looking forward to see your applications.
欢迎大家踊跃申请。

Posted by faker on 05/04/11 - 13:14:12

Nymph

占位编辑

Tzzzxxx

那么小的一个烂程序。。这么多年了竟然还那么多漏洞。

骗子

Tzzzxxx 发表于 2011-5-5 06:52
那么小的一个烂程序。。这么多年了竟然还那么多漏洞。

您老去支持一下？

124803430

{:soso__1661788721046378109_3:}有意思

iNK.

别把DEMO给删了啊，我刚买了个1TB的硬盘，准备去下载呢。。。

lzj5911

XJ都会被攻击- -
什么意思。。

119366686

有能力的上啊~！

Sh、小豪

老K去和他們交流交流啊。為中國爭光

huanghhp1234

被攻击是不是因为KZ知名度的提升？